iproute2: seg fault with 'ip link type gre ...' commands

[Nicolas Dichtel]

This upstream patch needs to be backported:
bde5baa5476c gre: raising the size of the buffer holding nl messages.
https://git.kernel.org/cgit/linux/kernel/git/shemminger/iproute2.git/commit/?id=bde5baa5476c

Example:
root@ubuntu1404:~# ip link add dummy1 type dummy
root@ubuntu1404:~# ip a a 10.200.0.1/24 dev dummy1
root@ubuntu1404:~# ip link add gre2 type gre local 10.200.0.1 remote 10.200.0.2 dev dummy1
root@ubuntu1404:~# ip link set gre2 type gre ttl 32
addattr_l ERROR: message exceeded bound of 1024
addattr_l ERROR: message exceeded bound of 1024
addattr_l ERROR: message exceeded bound of 1024
addattr_l ERROR: message exceeded bound of 1024
addattr_l ERROR: message exceeded bound of 1024
addattr_l ERROR: message exceeded bound of 1024
addattr_l ERROR: message exceeded bound of 1024
addattr_l ERROR: message exceeded bound of 1024
addattr_l ERROR: message exceeded bound of 1024
*** stack smashing detected ***: ip terminated
Aborted
root@ubuntu1404:~# uname -a
Linux ubuntu1404 3.13.0-66-generic #108-Ubuntu SMP Wed Oct 7 15:20:27 UTC 2015 x86_64 x86_64 x86_64 GNU/Linux
root@ubuntu1404:~# ip -V
ip utility, iproute2-ss131122
root@ubuntu1404:~#

[Nicolas Dichtel (nicolas-dichtel)]

After this patch, there is still another segfault:
$ ip -f inet6 tunnel add gre2 mode ip6gre local fd00:125::1:1 remote fd00:125::1:2 dev eth1
$ ip link set gre2 type ip6gre hoplimit 32

Here is the fix:
http://patchwork.ozlabs.org/patch/552378/
This fix depends on commit https://git.kernel.org/cgit/linux/kernel/git/shemminger/iproute2.git/commit/?id=c079e121a73a

[Nicolas Dichtel (nicolas-dichtel)]

The last patch is now upstream:
https://git.kernel.org/cgit/linux/kernel/git/shemminger/iproute2.git/commit/?id=ed108cfc0260b6b751647982b77d6363b1defb15

[Sebastien Bacher (seb128)]

Thanks, the patch fromt he description is in https://launchpad.net/ubuntu/+source/iproute2/4.1.1-1ubuntu1 since wily

The other patch is not a release yet, it might be a good idea to send it to Debian as well and backport that before xenial if there is no new upstream version before that

[Nicolas Dichtel (nicolas-dichtel)]

Done here: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=812102

[Launchpad Janitor (janitor)]

This bug was fixed in the package iproute2 - 4.3.0-1ubuntu3

---------------
iproute2 (4.3.0-1ubuntu3) xenial; urgency=medium

  * Add d/p/1003-fix-variable-in-libnetlink.patch (LP: #1522371), fix a variable name
    collision issuing a segfault; from upstream.
  * Add TIPC support (LP: #1508225):
    - d/control: add libmnl-dev to BDs, to include TIPC support.
    - d/iproute2.install: add tipc binary.

 -- Pierre-André MOREY <email address hidden> Tue, 05 Apr 2016 09:43:44 +0200