diff options
Diffstat (limited to 'src')
| -rw-r--r-- | src/expr/data_reg.c | 11 | ||||
| -rw-r--r-- | src/expr/immediate.c | 9 |
2 files changed, 20 insertions, 0 deletions
diff --git a/src/expr/data_reg.c b/src/expr/data_reg.c index b5fbdf2..b375db4 100644 --- a/src/expr/data_reg.c +++ b/src/expr/data_reg.c @@ -499,3 +499,14 @@ int nft_parse_data(union nft_data_reg *data, struct nlattr *attr, int *type) return ret; } +void nft_free_verdict(union nft_data_reg *data) +{ + switch(data->verdict) { + case NFT_JUMP: + case NFT_GOTO: + xfree(data->chain); + break; + default: + break; + } +} diff --git a/src/expr/immediate.c b/src/expr/immediate.c index 692d9e9..cf06190 100644 --- a/src/expr/immediate.c +++ b/src/expr/immediate.c @@ -309,10 +309,19 @@ nft_rule_expr_immediate_snprintf(char *buf, size_t len, uint32_t type, return -1; } +static void nft_rule_expr_immediate_free(struct nft_rule_expr *e) +{ + struct nft_expr_immediate *imm = nft_expr_data(e); + + if (e->flags & (1 << NFT_EXPR_IMM_VERDICT)) + nft_free_verdict(&imm->data); +} + struct expr_ops expr_ops_immediate = { .name = "immediate", .alloc_len = sizeof(struct nft_expr_immediate), .max_attr = NFTA_IMMEDIATE_MAX, + .free = nft_rule_expr_immediate_free, .set = nft_rule_expr_immediate_set, .get = nft_rule_expr_immediate_get, .parse = nft_rule_expr_immediate_parse, |