diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2022-06-01 10:14:22 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2022-06-01 10:35:16 +0200 |
| commit | 59bd944f6d75e99fe0c8d743e7fd482672640c2d (patch) | |
| tree | d2700e3bb28001352f801c698803772470516970 /tests/shell/testcases/optimizations/dumps | |
| parent | 87fdf683fb5aec51ce8c399aa28a0db0d2adb69a (diff) | |
optimize: segfault when releasing unsupported statement
Call xfree() instead since stmt_alloc() does not initialize the
statement type fields.
Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1609
Fixes: ea1f1c9ff608 ("optimize: memleak in statement matrix")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tests/shell/testcases/optimizations/dumps')
| -rw-r--r-- | tests/shell/testcases/optimizations/dumps/merge_vmaps.nft | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/tests/shell/testcases/optimizations/dumps/merge_vmaps.nft b/tests/shell/testcases/optimizations/dumps/merge_vmaps.nft index 05b9e575..c981acf0 100644 --- a/tests/shell/testcases/optimizations/dumps/merge_vmaps.nft +++ b/tests/shell/testcases/optimizations/dumps/merge_vmaps.nft @@ -1,4 +1,10 @@ table ip x { + set s { + type ipv4_addr + size 65535 + flags dynamic + } + chain filter_in_tcp { } @@ -6,6 +12,7 @@ table ip x { } chain y { + update @s { ip saddr limit rate 12/minute burst 30 packets } accept tcp dport vmap { 80 : accept, 81 : accept, 443 : accept, 8000-8100 : accept, 24000-25000 : accept } meta l4proto vmap { tcp : goto filter_in_tcp, udp : goto filter_in_udp } log |