Unverified Commit 4ac53fa0 authored Oct 12, 2024 by openeuler-ci-bot Committed by Gitee Oct 12, 2024

!12097 netfilter: nft_socket: fix sk refcount leaks

Merge Pull Request from: @ci-robot 
 
PR sync from: Wang Liang <wangliang74@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/OKHHXNUJ3D7IOFTWTLZFOGB4Q5ZXBD34/ 
 
https://gitee.com/src-openeuler/kernel/issues/IAU9K2 
 
Link:https://gitee.com/openeuler/kernel/pulls/12097

 

Reviewed-by: Yue Haibing <yuehaibing@huawei.com>
Signed-off-by: Yang Yingliang <yangyingliang@huawei.com>

parents 1152fd23 18606c15

net/netfilter/nft_socket.c

+3 −2

Original line number	Diff line number	Diff line
		@@ -88,13 +88,13 @@ static void nft_socket_eval(const struct nft_expr *expr,
		*dest = sk->sk_mark;
		} else {
		regs->verdict.code = NFT_BREAK;
		return;
		goto out_put_sk;
		}
		break;
		case NFT_SOCKET_WILDCARD:
		if (!sk_fullsock(sk)) {
		regs->verdict.code = NFT_BREAK;
		return;
		goto out_put_sk;
		}
		nft_socket_wildcard(pkt, regs, sk, dest);
		break;
		@@ -103,6 +103,7 @@ static void nft_socket_eval(const struct nft_expr *expr,
		regs->verdict.code = NFT_BREAK;
		}

		out_put_sk:
		if (sk != skb->sk)
		sock_gen_put(sk);
		}