diff options
| author | Phil Sutter <phil@nwl.cc> | 2025-11-20 13:55:38 +0100 |
|---|---|---|
| committer | Phil Sutter <phil@nwl.cc> | 2025-11-27 21:07:02 +0100 |
| commit | 78d7a5f8619f3965ec2da13003a876c808c40cfb (patch) | |
| tree | f84a00f9cafa4809eb43d7d8ff917e3401f432c2 /include | |
| parent | c3d5053db05f99bd72219aebeefc7fb0195ac041 (diff) | |
As reported in nfbz#1820, trying to add a rule and replacing it in the
same batch would crash iptables due to a stale rule pointer left in an
obj_update.
Doing this is perfectly fine in legacy iptables, so implement the
missing feature instead of merely preventing the crash.
Link: https://bugzilla.netfilter.org/show_bug.cgi?id=1820
Fixes: b199aca80da57 ("nft: Fix leak when replacing a rule")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions