tree c578a73d1a21517d1b4101b7e74f0db0b0bc5ee4
parent 974292defee033bc43ccfcb2fcefc3eba3905340
author Florian Westphal <fw@strlen.de> 1499687633 +0200
committer Pablo Neira Ayuso <pablo@netfilter.org> 1500303792 +0200

netfilter: expect: fix crash when putting uninited expectation

We crash in __nf_ct_expect_check, it calls nf_ct_remove_expect on the
uninitialised expectation instead of existing one, so del_timer chokes
on random memory address.

Fixes: ec0e3f01114ad32711243 ("netfilter: nf_ct_expect: Add nf_ct_remove_expect()")
Reported-by: Sergey Kvachonok <ravenexp@gmail.com>
Tested-by: Sergey Kvachonok <ravenexp@gmail.com>
Cc: Gao Feng <fgao@ikuai8.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>