From d6bc6084bca3304a8cc800a57869bef1e21498de Mon Sep 17 00:00:00 2001 From: Harald Welte Date: Sat, 11 Feb 2006 09:34:16 +0000 Subject: fix double-free if a single match is used multiple times within a signle rule (Closes: #440). However, while this fixes the double-free, it still doesn't make iptables support two of the same matches within one rule. Apparently the last matchinfo is copied into all the previous matchinfo instances. --- ip6tables.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'ip6tables.c') diff --git a/ip6tables.c b/ip6tables.c index 6afe68fd..e2c514e2 100644 --- a/ip6tables.c +++ b/ip6tables.c @@ -1691,8 +1691,10 @@ void clear_rule_matches(struct ip6tables_rule_match **matches) for (matchp = *matches; matchp;) { tmp = matchp->next; - if (matchp->match->m) + if (matchp->match->m) { free(matchp->match->m); + matchp->match->m = NULL; + } free(matchp); matchp = tmp; } -- cgit v1.2.3