Commit 0e93bb94 authored by Pavel Emelyanov's avatar Pavel Emelyanov Committed by David S. Miller
Browse files

netfilter: x_tables: fix net namespace leak when reading /proc/net/xxx_tables_names 



The seq_open_net() call should be accompanied with seq_release_net() one.

Signed-off-by: default avatarPavel Emelyanov <xemul@openvz.org>
Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent be8d0d79

net/netfilter/x_tables.c

+1 −1
Original line number Diff line number Diff line
@@ -787,7 +787,7 @@ static const struct file_operations xt_table_ops = { 
	.open	 = xt_table_open,

	.read	 = seq_read,

	.llseek	 = seq_lseek,

	.release = seq_release,

	.release = seq_release_net,

};



static void *xt_match_seq_start(struct seq_file *seq, loff_t *pos)