lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Mon, 19 Nov 2007 22:24:24 +0300 From: Evgeniy Polyakov <johnpol@....mipt.ru> To: David <david@...olicited.net> Cc: Patrick McHardy <kaber@...sh.net>, Ismail Dönmez <ismail@...dus.org.tr>, netdev@...r.kernel.org Subject: Re: Netfilter: kernel panic with REDIRECT target. (2.6.23 and 2.6.23.8) On Mon, Nov 19, 2007 at 06:51:38PM +0000, David (david@...olicited.net) wrote: > Patrick McHardy wrote: > >>>> iptables -t nat -A PREROUTING -j REDIRECT -i eth2 -p udp --dport > >>>> 5061 --to-ports 5060 > >>>> > >>>> > >>> Also post the kernel panic log. > >>> > > > > Please try if this patch fixes the problem. > > No luck with the patch I'm afraid, panic log attached (of patched kernel). Ok, let's try it hard way. Please check attached patch and tell if it helped (it will produce some debug though). What is a load on this machine? Is it simple enough to reproduce? I will take closer look tomorrow if this will not help. Thanks. diff --git a/net/ipv4/netfilter/nf_nat_core.c b/net/ipv4/netfilter/nf_nat_core.c index 70e7997..7dc3496 100644 --- a/net/ipv4/netfilter/nf_nat_core.c +++ b/net/ipv4/netfilter/nf_nat_core.c @@ -607,13 +607,13 @@ static void nf_nat_move_storage(struct nf_conn *conntrack, void *old) struct nf_conn_nat *new_nat = nf_ct_ext_find(conntrack, NF_CT_EXT_NAT); struct nf_conn_nat *old_nat = (struct nf_conn_nat *)old; struct nf_conn *ct = old_nat->ct; - unsigned int srchash; + + printk("conntrack: %p, new: %p, old: %p, ct: %p.\n", + conntrack, new_nat, old_nat, ct); - if (!(ct->status & IPS_NAT_DONE_MASK)) + if (!ct || !(ct->status & IPS_NAT_DONE_MASK)) return; - srchash = hash_by_src(&ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple); - write_lock_bh(&nf_nat_lock); hlist_replace_rcu(&old_nat->bysource, &new_nat->bysource); new_nat->ct = ct; -- Evgeniy Polyakov - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists