netdev - backport of "netfilter: nf_tables: fix mismatch in big-endian system" to stable

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <57839912-0d8a-b5aa-e382-4cee331ec223@hauke-m.de>
Date:   Sat, 20 Jan 2018 21:02:46 +0100
From:   Hauke Mehrtens <hauke@...ke-m.de>
To:     netdev <netdev@...r.kernel.org>, David Miller <davem@...emloft.net>
Cc:     Pablo Neira Ayuso <pablo@...filter.org>,
        Liping Zhang <zlpnobody@...il.com>,
        Florian Westphal <fw@...len.de>
Subject: backport of "netfilter: nf_tables: fix mismatch in big-endian system"
 to stable

nftables does not work correctly on big endian systems without this patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=10596608c4d62cb8c1c2b806debcbd32fe657e71

With nftables v0.8.1 this rule does not work:
	nft add rule ip foo bar ct state new tcp dport 22 accept
I can set it successfully, but it will just not match to port 22.
The examples from this tutorial will not work with kernel 4.9 + nftables
v0.8.1:
https://people.netfilter.org/pablo/nft-tutorial.pdf

This nftables commit broke nftables for me on my MIPS BE system:
https://git.netfilter.org/nftables/commit/?id=0825c57d571bb7121e7048e198b9b023f7e7f358
but the root cause is in the kernel.

I would like to get commit 10596608c4d62cb8c1c2b806debcbd32fe657e71
("netfilter: nf_tables: fix mismatch in big-endian system") backported
to kernel 4.9 or even earlier to make nftable work correctly on big
endian systems.

Hauke