]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: nft_immediate: drop chain reference counter on error
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 1 Jan 2024 19:15:33 +0000 (20:15 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 10 Jan 2024 16:10:24 +0000 (17:10 +0100)
commit81f8a995ebc8fa90903ff690c48a563116cb5dc4
tree8dae30a6dfa9a38119413deb264ad920350e771a
parentbb1bf97fa1877d40ad93f27e6d4b4f993565e465
netfilter: nft_immediate: drop chain reference counter on error

[ Upstream commit b29be0ca8e816119ccdf95cc7d7c7be9bde005f1 ]

In the init path, nft_data_init() bumps the chain reference counter,
decrement it on error by following the error path which calls
nft_data_release() to restore it.

Fixes: 4bedf9eee016 ("netfilter: nf_tables: fix chain binding transaction logic")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nft_immediate.c