Re: [PATCH nf] netfilter: nf_tables: nft_compat: fix refcount leak on xt module

2018-05-08 Thread Pablo Neira Ayuso
On Wed, May 02, 2018 at 02:07:42PM +0200, Florian Westphal wrote: > Taehee Yoo reported following bug: > iptables-compat -I OUTPUT -m cpu --cpu 0 > iptables-compat -F > lsmod |grep xt_cpu > xt_cpu 16384 1 > > Quote: > "When above command is given, a netlink

[PATCH nf] netfilter: nf_tables: nft_compat: fix refcount leak on xt module

2018-05-02 Thread Florian Westphal
Taehee Yoo reported following bug: iptables-compat -I OUTPUT -m cpu --cpu 0 iptables-compat -F lsmod |grep xt_cpu xt_cpu 16384 1 Quote: "When above command is given, a netlink message has two expressions that are the cpu compat and the nft_counter. The