Skip to contentSkip to conversation

: Net namespace leak when reading /proc/net/xxx_tables_names.

PATCH Applied Pavel Emelyanov 2 participants 2 messages Apr 21, 2008

Subsystems (3)
lore
Share & tools
lore
#0 lore raw

PATCH 1/1 : Net namespace leak when reading /proc/net/xxx_tables_names.

The seq_open_net() call should be accompanied with seq_release_net() one.

---

net/netfilter/x_tables.c +1 -1
index f52f7f8..11b22ab 100644
@@ -787,7 +787,7 @@ static const struct file_operations xt_table_ops = {
 	.open	 = xt_table_open,
 	.read	 = seq_read,
 	.llseek	 = seq_lseek,
-	.release = seq_release,
+	.release = seq_release_net,
 };
 
 static void *xt_match_seq_start(struct seq_file *seq, loff_t *pos)