Commit 9e10ad0f authored by Harald Welte's avatar Harald Welte Committed by David S. Miller

[NETFILTER]: Fix conntrack master_ct refcounting.

parent d569594f
...@@ -305,9 +305,6 @@ destroy_conntrack(struct nf_conntrack *nfct) ...@@ -305,9 +305,6 @@ destroy_conntrack(struct nf_conntrack *nfct)
IP_NF_ASSERT(atomic_read(&nfct->use) == 0); IP_NF_ASSERT(atomic_read(&nfct->use) == 0);
IP_NF_ASSERT(!timer_pending(&ct->timeout)); IP_NF_ASSERT(!timer_pending(&ct->timeout));
if (master_ct(ct))
ip_conntrack_put(master_ct(ct));
/* To make sure we don't get any weird locking issues here: /* To make sure we don't get any weird locking issues here:
* destroy_conntrack() MUST NOT be called with a write lock * destroy_conntrack() MUST NOT be called with a write lock
* to ip_conntrack_lock!!! -HW */ * to ip_conntrack_lock!!! -HW */
...@@ -324,9 +321,12 @@ destroy_conntrack(struct nf_conntrack *nfct) ...@@ -324,9 +321,12 @@ destroy_conntrack(struct nf_conntrack *nfct)
/* Delete our master expectation */ /* Delete our master expectation */
if (ct->master) { if (ct->master) {
/* can't call __unexpect_related here, if (ct->master->expectant) {
* since it would screw up expect_list */ /* can't call __unexpect_related here,
list_del(&ct->master->expected_list); * since it would screw up expect_list */
list_del(&ct->master->expected_list);
ip_conntrack_put(ct->master->expectant);
}
kfree(ct->master); kfree(ct->master);
} }
WRITE_UNLOCK(&ip_conntrack_lock); WRITE_UNLOCK(&ip_conntrack_lock);
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment