route: fix just introduced use-after-free in rtnl_act_parse()

Fixes: 105a6be ('route: use cleanup macro in rtnl_act_parse()')
thom311 · Dec 1, 2023 · efd65fe · efd65fe
1 parent 105a6be
commit efd65fe
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/lib/route/act.c b/lib/route/act.c
@@ -496,6 +496,8 @@ int rtnl_act_parse(struct rtnl_act **head, struct nlattr *tb)
 		err = rtnl_act_append(&tmp_head, act);
 		if (err < 0)
 			return err;
+
+		_nl_steal_pointer(&act);
 	}
 
 	*head = _nl_steal_pointer(&tmp_head);