]> git.ipfire.org Git - thirdparty/nftables.git/commit
projects / thirdparty / nftables.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e8a7bdb) | patch
evaluate: fix double free on dtype release
authorFlorian Westphal <fw@strlen.de>
Tue, 5 Dec 2023 12:08:17 +0000 (13:08 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 12 Dec 2023 12:30:09 +0000 (13:30 +0100)
commit9f10130418564a832e3a8e9d25c9ec783f485358
tree1442193ea657e5abf7bdd4f66544896489155844tree | snapshot
parente8a7bdbd58f57ed46b6979eab3e4f19bfd9d8858commit | diff
evaluate: fix double free on dtype release

commit ee73e9dcd46dc5a1fe3be7caa8b9323819e394b8 upstream.

We release ->dtype twice, will either segfault or assert
on dtype->refcount != 0 check in datatype_free().

Signed-off-by: Florian Westphal <fw@strlen.de>
src/evaluate.c diff | blob | blame | history
tests/shell/testcases/bogons/nft-f/double-free-on-binop-dtype_assert [new file with mode: 0644] blob
Mirror of git://git.netfilter.org/nftables