netfilter: nf_conncount: fix leaked ct in error paths

Browse source

[ Upstream commit 2e2a720766 ]

There are some situations where ct might be leaked as error paths are
skipping the refcounted check and return immediately. In order to solve
it make sure that the check is always called.

Fixes: be102eb6a0 ("netfilter: nf_conncount: rework API to use sk_buff directly")
Signed-off-by: Fernando Fernandez Mancera <fmancera@suse.de>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>

...

This commit is contained in:

Fernando Fernandez Mancera 2025-12-05 12:58:01 +01:00 • committed by Greg Kroah-Hartman

parent c70df25214

commit 4bd2b89f40

1 changed files with 14 additions and 11 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

25

net/netfilter/nf_conncount.c

View file