netfilter: nf_tables: uninitialize element key/data from the commit path
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 1 Aug 2014 17:32:41 +0000 (19:32 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 8 Aug 2014 13:38:46 +0000 (15:38 +0200)
This should happen once the element has been effectively released in
the commit path, not before. This fixes a possible chain refcount leak
if the transaction is aborted.

Reported-by: Thomas Graf <tgraf@suug.ch>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

No differences found