From d6bc6084bca3304a8cc800a57869bef1e21498de Mon Sep 17 00:00:00 2001 From: Harald Welte Date: Sat, 11 Feb 2006 09:34:16 +0000 Subject: fix double-free if a single match is used multiple times within a signle rule (Closes: #440). However, while this fixes the double-free, it still doesn't make iptables support two of the same matches within one rule. Apparently the last matchinfo is copied into all the previous matchinfo instances. --- iptables.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'iptables.c') diff --git a/iptables.c b/iptables.c index e22b9ea1..b66e5e1b 100644 --- a/iptables.c +++ b/iptables.c @@ -1800,8 +1800,10 @@ void clear_rule_matches(struct iptables_rule_match **matches) for (matchp = *matches; matchp;) { tmp = matchp->next; - if (matchp->match->m) + if (matchp->match->m) { free(matchp->match->m); + matchp->match->m = NULL; + } free(matchp); matchp = tmp; } -- cgit v1.2.3