On Friday 2014-10-31 23:50, Florian Westphal wrote: > >The unclean fix is to provide compat fixup hooks to transparently >convert it in the kernel. > >[..] >#ifdef CONFIG_COMPAT > .compatsize = sizeof(struct compat_xt_rateinfo), > .compat_from_user = limit_mt_compat_from_user, > .compat_to_user = limit_mt_compat_to_user, >#endif > >The size of the 32bit layout and convert hooks that translate >from the 32 to 64 bit layout (and vice versa). That is not going to work, especially if you have more than three or more ABIs in the system. Like, o32/n32/64 for mips (or i386/x86_64/x32). A report about that happens about every year on the mailing list. The only fix is to define a v4, and to make sure that there is no implicit padding of 32 bits or more. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html