| commit | 6d670497e01803b486aa72cc1a718401ab986896 | [log] [tgz] |
|---|---|---|
| author | Dan Carpenter <dan.carpenter@oracle.com> | Tue Apr 02 09:53:14 2019 +0300 |
| committer | David S. Miller <davem@davemloft.net> | Tue Apr 02 10:56:21 2019 -0700 |
| tree | b6c04cf9dbf218980ee7c25b16dd0449e817e77c | |
| parent | f0dfecc93a60d6ac2acae886103ee0449a25a9c9 [diff] |
openvswitch: use after free in __ovs_ct_free_action()
We free "ct_info->ct" and then use it on the next line when we pass it
to nf_ct_destroy_timeout(). This patch swaps the order to avoid the use
after free.
Fixes: 06bd2bdf19d2 ("openvswitch: Add timeout support to ct action")
Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Acked-by: Yi-Hung Wei <yihung.wei@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>