Skip to content
  • Pablo Neira Ayuso's avatar
    netfilter: xt_CT: fix crash while destroy ct templates · 252b3e8c
    Pablo Neira Ayuso authored
    In (d871befe
    
     netfilter: ctnetlink: dump entries from the dying and
    unconfirmed lists), we assume that all conntrack objects are
    inserted in any of the existing lists. However, template conntrack
    objects were not. This results in hitting BUG_ON in the
    destroy_conntrack path while removing a rule that uses the CT target.
    
    This patch fixes the situation by adding the template lists, which
    is where template conntrack objects reside now.
    
    Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
    252b3e8c