Re: [PATCH nf] netfilter: nf_tables: fix memory leak if expr init fails

2016-06-23 Thread Pablo Neira Ayuso
On Mon, Jun 20, 2016 at 09:11:45PM +0800, Liping Zhang wrote: > From: Liping Zhang > > If expr init fails then we need to free it. > > So when the user add a nft rule as follows: > # nft add rule filter input tcp dport 22 flow table ssh \ > { ip saddr limit

[PATCH nf] netfilter: nf_tables: fix memory leak if expr init fails

2016-06-20 Thread Liping Zhang
From: Liping Zhang If expr init fails then we need to free it. So when the user add a nft rule as follows: # nft add rule filter input tcp dport 22 flow table ssh \ { ip saddr limit rate 0/second } memory leak will happen. Signed-off-by: Liping Zhang