@@ -1050,6 +1050,18 @@ static int net_flow_get_field(struct net_flow_field_ref *field,
return 0;
}
+static void net_flow_free_actions(struct net_flow_action *actions)
+{
+ int i;
+
+ if (!actions)
+ return;
+
+ for (i = 0; actions[i].uid; i++)
+ kfree(actions[i].args);
+ kfree(actions);
+}
+
static int net_flow_get_action(struct net_flow_action *a, struct nlattr *attr)
{
struct nlattr *act[NET_FLOW_ACTION_ATTR_MAX+1];
@@ -1168,7 +1180,7 @@ static int net_flow_get_flow(struct net_flow_flow *flow, struct nlattr *attr)
err = net_flow_get_action(&flow->actions[count], attr2);
if (err) {
kfree(flow->matches);
- kfree(flow->actions);
+ net_flow_free_actions(flow->actions);
return err;
}
count++;
@@ -1251,7 +1263,7 @@ static int net_flow_table_cmd_flows(struct sk_buff *recv_skb,
/* Cleanup flow */
kfree(this.matches);
- kfree(this.actions);
+ net_flow_free_actions(this.actions);
if (err && err_handle == NET_FLOW_FLOWS_ERROR_ABORT)
goto out;
Free the args of an action along with the action itself to avoid leaking memory. Signed-off-by: Simon Horman <simon.horman@netronome.com> --- net/core/flow_table.c | 16 ++++++++++++++-- 1 file changed, 14 insertions(+), 2 deletions(-)