linux-kernel - Re: [PATCH net-next] netfilter: fix nf_conntrack

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Fri, 21 Jun 2019 17:21:00 +0200
From:   Pablo Neira Ayuso <pablo@...filter.org>
To:     Arnd Bergmann <arnd@...db.de>
Cc:     Jozsef Kadlecsik <kadlec@...ckhole.kfki.hu>,
        Florian Westphal <fw@...len.de>,
        "David S. Miller" <davem@...emloft.net>, wenxu <wenxu@...oud.cn>,
        netfilter-devel@...r.kernel.org, coreteam@...filter.org,
        linux-kernel@...r.kernel.org
Subject: Re: [PATCH net-next] netfilter: fix nf_conntrack_bridge/ipv6 link
 error

On Mon, Jun 17, 2019 at 03:15:04PM +0200, Arnd Bergmann wrote:
> When CONFIG_IPV6 is disabled, the bridge netfilter code
> produces a link error:
> 
> ERROR: "br_ip6_fragment" [net/bridge/netfilter/nf_conntrack_bridge.ko] undefined!
> ERROR: "nf_ct_frag6_gather" [net/bridge/netfilter/nf_conntrack_bridge.ko] undefined!
> 
> The problem is that it assumes that whenever IPV6 is not a loadable
> module, we can call the functions direction. This is clearly
> not true when IPV6 is disabled.
> 
> There are two other functions defined like this in linux/netfilter_ipv6.h,
> so change them all the same way.

Applied, thanks Arnd.