netfilter: nf_tables: uninitialize element key/data from the commit path
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 1 Aug 2014 17:32:41 +0000 (19:32 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 8 Aug 2014 13:38:46 +0000 (15:38 +0200)
commita3716e70e1def691ad39e0f908fea0870ce010d9
tree1d263f1e8ac0c42bbfb259dea32111ae6bf34280
parent33caee39925b887a99a2400dc5c980097c3573f9
netfilter: nf_tables: uninitialize element key/data from the commit path

This should happen once the element has been effectively released in
the commit path, not before. This fixes a possible chain refcount leak
if the transaction is aborted.

Reported-by: Thomas Graf <tgraf@suug.ch>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c