]> git.ipfire.org Git - thirdparty/iptables.git/commit
Alignment problem between 64bit kernel 32bit userspace
authorJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Thu, 6 Nov 2014 18:15:26 +0000 (19:15 +0100)
committerJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Thu, 6 Nov 2014 18:15:26 +0000 (19:15 +0100)
commita40cd9b784590ee09f1be4897f28bb0b2ce1096d
tree57cad29658356b7ea75daab99a2d2e6efccece1a
parentda6c162ce5fb42fa5439ae0b95c321fb476b9cb7
Alignment problem between 64bit kernel 32bit userspace

Sven-Haegar Koch reported the issue:

sims:~# iptables -A OUTPUT -m set --match-set testset src -j ACCEPT
iptables: Invalid argument. Run `dmesg' for more information.

In syslog:
x_tables: ip_tables: set.3 match: invalid size 48 (kernel) != (user) 32

which was introduced by the counter extension in ipset.

The patch fixes the alignment issue with introducing a new set match
revision with the fixed underlying 'struct ip_set_counter_match'
structure.

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
extensions/libxt_set.c
include/linux/netfilter/ipset/ip_set.h
include/linux/netfilter/xt_set.h