diff options
author | Pablo Neira Ayuso <pablo@netfilter.org> | 2015-08-17 04:41:32 +0200 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2015-08-18 01:58:49 +0200 |
commit | 37268a018e99181a1d203f0a8a6fc5c6670d09b2 (patch) | |
tree | b11ab2fd2ba8b0ef8777eb6739cf09bc65b1187d /include | |
parent | 6e188637782c6c62c7bcade808e59d17639d677d (diff) |
expr: immediate: fix leak in expression destroy path
The verdict can be a chain string, make sure we release it when the expression
is destroyed. This patch adds a new nft_free_data() for this purpose and use it
from the immediate expression.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include')
-rw-r--r-- | include/data_reg.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/include/data_reg.h b/include/data_reg.h index cf14988..e0fdd10 100644 --- a/include/data_reg.h +++ b/include/data_reg.h @@ -28,5 +28,6 @@ int nft_data_reg_snprintf(char *buf, size_t size, union nft_data_reg *reg, struct nlattr; int nft_parse_data(union nft_data_reg *data, struct nlattr *attr, int *type); +void nft_free_verdict(union nft_data_reg *data); #endif |