Re: Oops in replace_in_hashes (ip_net_core.c) 2.4.19

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 2003-07-01 at 11:47, David S. Miller wrote:

> I believe 2.4.21 has a fix for this, but the netfilter
> experts will know better.

(Dave, it's netfilter-devel@lists.netfilter.org)
(to the rest, the original report can be found on linux-net)

It looks like list-corruption.

ip_conntrack_core.c:665
byipsproto[ipsprotohash].next points into space.

I can't see anything obvious right now, my eyelids are very heavy so
I'll continue looking tomorrow.

There's a small possibility that this is caused by the modify-after-free
bug that's fixed in 2.4.21 (but unfortunately introduced some
refcounting bugs, patches are on the way to Dave, they can be found in
netfilter patch-o-matic as well).

-- 
/Martin
-
: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux 802.1Q VLAN]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Git]     [Bugtraq]     [Yosemite News and Information]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux PCI]     [Linux Admin]     [Samba]

  Powered by Linux