Pablo Neira Ayuso 4c167af9f6 netfilter: nft_flow_offload: reset dst in route object after setting up flow ...

[ Upstream commit 9e0f0430389be7696396c62f037be4bf72cf93e3 ]

dst is transferred to the flow object, route object does not own it
anymore.  Reset dst in route object, otherwise if flow_offload_add()
fails, error path releases dst twice, leading to a refcount underflow.

Fixes: a3c90f7a2323 ("netfilter: nf_tables: flow offload expression")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-03-01 13:22:00 +01:00

..

ipv4

netfilter: disable defrag once its no longer needed

2021-04-26 03:20:07 +02:00

ipv6

netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1

2021-09-28 13:04:55 +02:00

br_netfilter.h

…

nf_conntrack_acct.h

netfilter: conntrack: add nf_ct_acct_add()

2020-03-30 02:05:39 +02:00

nf_conntrack_bridge.h

…

nf_conntrack_core.h

netfilter: conntrack: re-fetch conntrack after insertion

2022-06-06 08:43:38 +02:00

nf_conntrack_count.h

…

nf_conntrack_ecache.h

netfilter: ecache: remove nf_exp_event_notifier structure

2021-08-25 12:50:38 +02:00

nf_conntrack_expect.h

…

nf_conntrack_extend.h

netfilter: Replace zero-length array with flexible-array member

2020-03-15 15:20:16 +01:00

nf_conntrack_helper.h

netfilter: conntrack: Add and use nf_ct_set_auto_assign_helper_warned()

2022-04-08 14:23:42 +02:00

nf_conntrack_l4proto.h

netfilter: conntrack: pass hook state to log functions

2021-06-18 14:47:43 +02:00

nf_conntrack_labels.h

…

nf_conntrack_seqadj.h

…

nf_conntrack_synproxy.h

…

nf_conntrack_timeout.h

netfilter: Replace zero-length array with flexible-array member

2020-03-15 15:20:16 +01:00

nf_conntrack_timestamp.h

…

nf_conntrack_tuple.h

…

nf_conntrack_zones.h

…

nf_conntrack.h

netfilter: conntrack: avoid useless indirection during conntrack destruction

2022-04-27 14:39:01 +02:00

nf_dup_netdev.h

…

nf_flow_table.h

netfilter: nft_flow_offload: reset dst in route object after setting up flow

2024-03-01 13:22:00 +01:00

nf_hooks_lwtunnel.h

netfilter: add netfilter hooks to SRv6 data plane

2021-08-30 01:51:36 +02:00

nf_log.h

netfilter: nf_log_common: merge with nf_log_syslog

2021-03-31 22:34:10 +02:00

nf_nat_helper.h

…

nf_nat_masquerade.h

…

nf_nat_redirect.h

netfilter: nft_redir: use struct nf_nat_range2 throughout and deduplicate eval call-backs

2023-11-20 11:08:29 +01:00

nf_nat.h

netfilter: nat: move nf_xfrm_me_harder to where it is used

2021-04-26 03:20:07 +02:00

nf_queue.h

netfilter: nf_queue: fix possible use-after-free

2022-03-08 19:12:45 +01:00

nf_reject.h

…

nf_socket.h

…

nf_synproxy.h

…

nf_tables_core.h

netfilter: nft_cmp: optimize comparison for 16-bytes

2022-08-31 17:16:41 +02:00

nf_tables_ipv4.h

netfilter: nf_tables: convert pktinfo->tprot_set to flags field

2022-07-12 16:34:55 +02:00

nf_tables_ipv6.h

netfilter: nf_tables: convert pktinfo->tprot_set to flags field

2022-07-12 16:34:55 +02:00

nf_tables_offload.h

netfilter: nf_tables: bail out early if hardware offload is not supported

2022-06-14 18:36:17 +02:00

nf_tables.h

netfilter: nf_tables: restrict tunnel object to NFPROTO_NETDEV

2024-02-23 08:54:54 +01:00

nf_tproxy.h

netfilter: tproxy: fix deadlock due to missing BH disable

2023-03-17 08:48:55 +01:00

nft_fib.h

netfilter: nftables: add nft_parse_register_store() and use it

2021-01-27 23:16:02 +01:00

nft_meta.h

netfilter: nftables: add nft_parse_register_store() and use it

2021-01-27 23:16:02 +01:00

nft_reject.h

…

xt_rateest.h

…