]> git.ipfire.org Git - thirdparty/nftables.git/commit
evaluate: fix double free on dtype release
authorFlorian Westphal <fw@strlen.de>
Tue, 5 Dec 2023 12:08:17 +0000 (13:08 +0100)
committerFlorian Westphal <fw@strlen.de>
Tue, 5 Dec 2023 19:30:38 +0000 (20:30 +0100)
commitee73e9dcd46dc5a1fe3be7caa8b9323819e394b8
tree87ac14962db6ad3f57bb1555503e30613e7822a3
parent70054e6e1c879475779d82d19f450ac521700fe4
evaluate: fix double free on dtype release

We release ->dtype twice, will either segfault or assert
on dtype->refcount != 0 check in datatype_free().

Signed-off-by: Florian Westphal <fw@strlen.de>
src/evaluate.c
tests/shell/testcases/bogons/nft-f/double-free-on-binop-dtype_assert [new file with mode: 0644]