netfilter: layer7: ct memory optimization

[people/arne_f/kernel.git] / net / netfilter / nf_conntrack_core.c

diff --git a/net/netfilter/nf_conntrack_core.c b/net/netfilter/nf_conntrack_core.c
index 01130392b7c0f536dc5afb74ff24d5b49cbd9f8a..871eaa2c35e71240a4bbca15965c37547b709cd6 100644 (file)
--- a/net/netfilter/nf_conntrack_core.c
+++ b/net/netfilter/nf_conntrack_core.c
@@ -427,6 +427,11 @@ destroy_conntrack(struct nf_conntrack *nfct)
         */
        nf_ct_remove_expectations(ct);
 
+#if defined(CONFIG_NETFILTER_XT_MATCH_LAYER7) || defined(CONFIG_NETFILTER_XT_MATCH_LAYER7_MODULE)
+       if(ct->layer7.app_data)
+               kfree(ct->layer7.app_data);
+#endif
+
        nf_ct_del_from_dying_or_unconfirmed_list(ct);
 
        local_bh_enable();