From 1ba5e76a368aeb9fe17d3b691df4faa0dadc4523 Mon Sep 17 00:00:00 2001 From: Kevin Cernekee Date: Thu, 26 Jan 2017 16:44:24 -0800 Subject: conntrackd: cthelper: Don't leak nat_tuple nfexp_set_attr() copies |nat_tuple| rather than taking ownership, so it should be freed at the end of the loop. Some of the other helpers (like rpc.c) do this, but it is missing here. Reported-by: Eric Caruso Signed-off-by: Kevin Cernekee Signed-off-by: Pablo Neira Ayuso --- src/helpers/ftp.c | 1 + 1 file changed, 1 insertion(+) (limited to 'src/helpers/ftp.c') diff --git a/src/helpers/ftp.c b/src/helpers/ftp.c index 27ab5eb..c3aa284 100644 --- a/src/helpers/ftp.c +++ b/src/helpers/ftp.c @@ -423,6 +423,7 @@ static unsigned int nf_nat_ftp(struct pkt_buff *pkt, break; } } + nfct_destroy(nat_tuple); if (port == 0) return NF_DROP; -- cgit v1.2.3