Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #880109

Bug#888442: [pkg-netfilter-team] Bug#888442: [nftables] Crash when list(ing) ip6tables-compat CT rules

From Arturo Borrero Gonzalez <arturo@debian.org>
Newsgroups linux.debian.bugs.dist
Subject Bug#888442: [pkg-netfilter-team] Bug#888442: [nftables] Crash when list(ing) ip6tables-compat CT rules
Date 2018-02-06 17:10 +0100
Message-ID <vgdYK-IP-3@gated-at.bofh.it> (permalink)
References <vbSJb-8jZ-3@gated-at.bofh.it> <vbSJb-8jZ-3@gated-at.bofh.it>
Organization linux.* mail to news gateway

Show all headers | View raw


Control: fixed -1 0.8.2-1

On 25 January 2018 at 17:33, Charlemagne Lasse
<charlemagnelasse@gmail.com> wrote:
> Package: nftables
> Version: 0.7-1
> Severity: important
>
> The nft list crashes when an ip6tables-compat CT rule is found also in
> iptables-compat. This is either an assert with 0.7-1 or a segfault
> with 0.8-2~bpo9+1.

This is fixed by this commit:

=== 8< ===
commit b4c7117ef552d0d71bde1db4a047b4c005699951
Author: Pablo Neira Ayuso <pablo@netfilter.org>
Date:   Sat Jan 20 13:38:55 2018 +0100

    Revert ("src: Remove xt_stmt_() functions").

    Revert commit bce55916b51ec1a4c23322781e3b0c698ecc9561, we need this
    code in place to properly make translation when iptables-compat loads
    rules.

    Reported-by: Duncan Roe <duncan_roe@optusnet.com.au>
    Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

=== 8< ===

This commit is included in the v0.8.2 release.

Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Find similar | Unroll thread


Thread

Bug#888442: [nftables] Crash when list(ing) ip6tables-compat CT rules Charlemagne Lasse <charlemagnelasse@gmail.com> - 2018-01-25 17:40 +0100
  Bug#888442: [pkg-netfilter-team] Bug#888442: [nftables] Crash when list(ing) ip6tables-compat CT rules Arturo Borrero Gonzalez <arturo@debian.org> - 2018-02-06 17:10 +0100

csiph-web