Re: [ANNOUNCE] ipset 6.12 released

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 10/05/12 at 12:18, Jozsef Kadlecsik wrote:
>  - Fix timeout value overflow bug at large timeout parameters
>    (bug reported by Andreas Herz)

I just tested and inspected your release, thanks for that.
But i can still reproduce the bug i reported.

You changed "ip_set_timeout_uget" but the bug occurs in
"ip_set_timeout_get" and the the userspace tool still reports a higher
range for the value (0-4294967).

> ipset create test hash:ip timeout 1000
> ipset add test 192.168.0.0/24 timeout 2147484
> ipset list

results in

> 192.168.0.0/24 timeout 1073741

on a 32 bit system.

But this is not really your fault, cause the kernel has a bug as i
mentioned here:

http://lkml.org/lkml/2012/4/20/36

But i didn't get a response yet :)

-- 
Andreas Herz
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux