diff options
| author | Gao Feng <fgao@ikuai8.com> | 2017-04-06 09:45:22 +0800 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2017-04-13 23:21:40 +0200 |
| commit | fe50543c194e2e1aee2f3eba41fcafd187b3dbde (patch) | |
| tree | 3333a980bddfecca92170fe3c820290f32a3b47a /net | |
| parent | 79e09ef96b6a5fb888f5241f3aa707e9ad0b1cce (diff) | |
| download | linux-0-day-fe50543c194e2e1aee2f3eba41fcafd187b3dbde.tar.gz linux-0-day-fe50543c194e2e1aee2f3eba41fcafd187b3dbde.tar.xz | |
netfilter: ipt_CLUSTERIP: Fix wrong conntrack netns refcnt usage
Current codes invoke wrongly nf_ct_netns_get in the destroy routine,
it should use nf_ct_netns_put, not nf_ct_netns_get.
It could cause some modules could not be unloaded.
Fixes: ecb2421b5ddf ("netfilter: add and use nf_ct_netns_get/put")
Signed-off-by: Gao Feng <fgao@ikuai8.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net')
| -rw-r--r-- | net/ipv4/netfilter/ipt_CLUSTERIP.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/ipv4/netfilter/ipt_CLUSTERIP.c b/net/ipv4/netfilter/ipt_CLUSTERIP.c index 52f26459efc34..9b8841316e7b9 100644 --- a/net/ipv4/netfilter/ipt_CLUSTERIP.c +++ b/net/ipv4/netfilter/ipt_CLUSTERIP.c @@ -461,7 +461,7 @@ static void clusterip_tg_destroy(const struct xt_tgdtor_param *par) clusterip_config_put(cipinfo->config); - nf_ct_netns_get(par->net, par->family); + nf_ct_netns_put(par->net, par->family); } #ifdef CONFIG_COMPAT |