[ovs-dev] [PATCH net-next] openvswitch: use after free in __ovs_ct_free_action()

[Yi-Hung Wei]

On Mon, Apr 1, 2019 at 11:53 PM Dan Carpenter <dan.carpenter at oracle.com> wrote:
>
> We free "ct_info->ct" and then use it on the next line when we pass it
> to nf_ct_destroy_timeout().  This patch swaps the order to avoid the use
> after free.
>
> Fixes: 06bd2bdf19d2 ("openvswitch: Add timeout support to ct action")
> Signed-off-by: Dan Carpenter <dan.carpenter at oracle.com>
> ---
Thanks for the fix.

Acked-by: Yi-Hung Wei <yihung.wei at gmail.com>