Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #880109
| From | Arturo Borrero Gonzalez <arturo@debian.org> |
|---|---|
| Newsgroups | linux.debian.bugs.dist |
| Subject | Bug#888442: [pkg-netfilter-team] Bug#888442: [nftables] Crash when list(ing) ip6tables-compat CT rules |
| Date | 2018-02-06 17:10 +0100 |
| Message-ID | <vgdYK-IP-3@gated-at.bofh.it> (permalink) |
| References | <vbSJb-8jZ-3@gated-at.bofh.it> <vbSJb-8jZ-3@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Control: fixed -1 0.8.2-1
On 25 January 2018 at 17:33, Charlemagne Lasse
<charlemagnelasse@gmail.com> wrote:
> Package: nftables
> Version: 0.7-1
> Severity: important
>
> The nft list crashes when an ip6tables-compat CT rule is found also in
> iptables-compat. This is either an assert with 0.7-1 or a segfault
> with 0.8-2~bpo9+1.
This is fixed by this commit:
=== 8< ===
commit b4c7117ef552d0d71bde1db4a047b4c005699951
Author: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Sat Jan 20 13:38:55 2018 +0100
Revert ("src: Remove xt_stmt_() functions").
Revert commit bce55916b51ec1a4c23322781e3b0c698ecc9561, we need this
code in place to properly make translation when iptables-compat loads
rules.
Reported-by: Duncan Roe <duncan_roe@optusnet.com.au>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
=== 8< ===
This commit is included in the v0.8.2 release.
Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Find similar | Unroll thread
Bug#888442: [nftables] Crash when list(ing) ip6tables-compat CT rules Charlemagne Lasse <charlemagnelasse@gmail.com> - 2018-01-25 17:40 +0100 Bug#888442: [pkg-netfilter-team] Bug#888442: [nftables] Crash when list(ing) ip6tables-compat CT rules Arturo Borrero Gonzalez <arturo@debian.org> - 2018-02-06 17:10 +0100
csiph-web