NETFILTER: ipt_CLUSTERIP: fix oops in checkentry function
[NETFILTER]: ipt_CLUSTERIP: fix oops in checkentry function The clusterip_config_find_get() already increases entries reference counter, so there is no reason to do it twice in checkentry() callback. This causes the config to be freed before it is removed from the list, resulting in a crash when adding the next rule. Signed-off-by: Jaroslav Kysela <perex@suse.cz> Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net> Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
This commit is contained in:
committed by
Greg Kroah-Hartman
parent
8e6697b59b
commit
9e45b2f0fd
@@ -409,12 +409,10 @@ checkentry(const char *tablename,
|
||||
"has invalid config pointer!\n");
|
||||
return 0;
|
||||
}
|
||||
clusterip_config_entry_get(cipinfo->config);
|
||||
} else {
|
||||
/* Case B: This is a new rule referring to an existing
|
||||
* clusterip config. */
|
||||
cipinfo->config = config;
|
||||
clusterip_config_entry_get(cipinfo->config);
|
||||
}
|
||||
} else {
|
||||
/* Case C: This is a completely new clusterip config */
|
||||
|
||||
Reference in New Issue
Block a user