Hi Dave, On Mon, 14 May 2012, David Miller wrote: > From: pablo@xxxxxxxxxxxxx > Date: Mon, 14 May 2012 13:46:59 +0200 > > > * One fix for possible timeout overflow for ipset, from Jozsef > > Kadlecsik. > > > > * One fix to ensure that hash size is correct, again for ipset > > from Jozsef Kadlecsik. > > > > * Removal of redundant include in xt_CT from Eldad Zack. > > > > * Fix for wrong usage of MODULE_ALIAS_NFCT_HELPER in nf_ct_h323 > > helper from myself. > > I don't consider any of these appropriate this late in the -RC > series. > > They don't fix major regressions seen by many users. Could at least the patch with the subject netfilter: ipset: fix hash size checking in kernel The hash size must fit both into u32 (jhash) and the max value of size_t. The missing checking could lead to kernel crash, bug reported by Seblu. be submitted into 3.4-rc7? Any non most-recent ipset package compiled with gcc-4.7 or above can trigger the bug. Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences H-1525 Budapest 114, POB. 49, Hungary -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
