netdev - iproute2 / xtables / undefined symbol in m

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [day] [month] [year] [list]

Date:	Tue, 1 Jul 2008 18:54:00 +0300
From:	Denys Fedoryshchenko <denys@...p.net.lb>
To:	netdev@...r.kernel.org
Subject: iproute2 / xtables / undefined symbol in m_ipt again

After building git iproute2 and trying to use with iptables 1.4.1.1 i notice error.

/sbin/tc: symbol lookup error: /lib/iptables/libxt_MARK.so: undefined symbol: param_act

I remember that many functions "stolen" from iptables source. It is defined in iptables package, in xtables.h, but ugly thing, 
all this functions not available over some shared library, but available in xtables.o, which is linked statically with many iptables binaries on build time.
No idea, why they didn't make it dynamic, and as result reduce binaries size? And also they can make by that life for m_ipt.c MUCH easier (and binary smaller too).

There is two ways to fix it:
1)Easiest and ugliest. Add all missing functions there, it works and tested. Patch attached.
2)Tricky. Get xtables.c from iptables build, add to iproute2 binaries and link with m_ipt
3)Normal. Someone must talk with iptables guys to make xtables.c as shared library. It will remove all headache with updating m_ipt and 
  incompatibility with different/new iptables versions.

-- 
------
Technical Manager
Virtual ISP S.A.L.
Lebanon

View attachment "iproute2-01052008-git.patch" of type "text/x-diff" (3674 bytes)