diff options
author | Pablo Neira Ayuso <pablo@netfilter.org> | 2015-11-26 16:20:55 +0100 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2015-11-28 13:48:37 +0100 |
commit | 972b03b43de3c896a0ff158110f0e7d978e7192e (patch) | |
tree | fd9b28691a2aefccf08fea68e4e863287b11afdd /tests/expr-meta | |
parent | 947b4fe19a742057093341975b4e33c962ef1446 (diff) |
netlink_delinearize: fix use-after-free
We have to clone the payload expression before attaching it to the lhs
of the relational expression, this payload expression is located at the
lhs of the binary operation that is released thereafter.
Fixes: 39f15c2 ("nft: support listing expressions that use non-byte header fields")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tests/expr-meta')
0 files changed, 0 insertions, 0 deletions