From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Wed, 4 May 2022 10:02:43 +0000 (+0200)
Subject: optimize: memleak in statement matrix
X-Git-Tag: v1.0.3~9
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=ea1f1c9ff608fbca858e13b7c3242f20cdb9854d;p=thirdparty%2Fnftables.git

optimize: memleak in statement matrix

Release clone object in case this statement is not supported.

Fixes: 743b0e81371f ("optimize: do not clone unsupported statement")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

diff --git a/src/optimize.c b/src/optimize.c
index cb3fff21..d6dfffec 100644
--- a/src/optimize.c
+++ b/src/optimize.c
@@ -304,6 +304,7 @@ static int rule_collect_stmts(struct optimize_ctx *ctx, struct rule *rule)
 			clone->nat.type_flags = stmt->nat.type_flags;
 			break;
 		default:
+			stmt_free(clone);
 			continue;
 		}