[Bug 1384] New: memory leaks when netfilter is used to filter network traffic

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Sun Dec 1 06:46:23 CET 2019


https://bugzilla.netfilter.org/show_bug.cgi?id=1384

            Bug ID: 1384
           Summary: memory leaks when netfilter is used to filter network
                    traffic
           Product: netfilter/iptables
           Version: unspecified
          Hardware: mips
                OS: other
            Status: NEW
          Severity: major
          Priority: P5
         Component: netfilter hooks
          Assignee: netfilter-buglog at lists.netfilter.org
          Reporter: sw1416ab at gmail.com

we used iptables to filter traffic to userspace and used libnetfilter_queue to
get the traffic, and simply verdict without any processing to the packets.
Found memory leaks.

Then we built a kernel module to filter traffic to queue 0, and
libnetfilter_queue is used to do the same. Still found memory leaks.

We also did another testing: in the kernel module, we do some condition check
to all the packets, no matter pass or not simply "return NF_ACCEPT". In this
test, libnetfilter_queue is not involved. Still found memory leaks. Without the
kernel module, there will be no memory leaks.

kernel version: 4-14-131. platform: openwrt-18.06.4.

Is it netfilter to complain or we missed something or did something
incorrectly?

Thanks in advance for your help.

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20191201/ff0cb521/attachment.html>


More information about the netfilter-buglog mailing list