Based on Roman's comment that a patch was merged for 2.6.29, I've confirmed this patch is indeed in the latest Karmic Alpha kernel (see commit id below). I'm marking this Fix Released for Karmic which will target a 2.6.31 kernel and has most recently rebased with 2.6.31-rc2 from upstream. Images are available for testing at http://cdimage.ubuntu.com/daily-live/current/ . Thanks.
The compat path suffers from a similar problem. It only uses a __be32
when all of the recent code uses, and expects, an nf_inet_addr
everywhere. As a result, addresses stored by xt_recents were
filled with whatever other stuff was on the stack following the be32.
Signed-off-by: Jan Engelhardt <email address hidden>
With a minor compile fix from Roman.
Reported-and-tested-by: Roman Hoog Antink <email address hidden>
Signed-off-by: Patrick McHardy <email address hidden>
Based on Roman's comment that a patch was merged for 2.6.29, I've confirmed this patch is indeed in the latest Karmic Alpha kernel (see commit id below). I'm marking this Fix Released for Karmic which will target a 2.6.31 kernel and has most recently rebased with 2.6.31-rc2 from upstream. Images are available for testing at http:// cdimage. ubuntu. com/daily- live/current/ . Thanks.
ogasawara@ emiko:~ /ubuntu- karmic$ git log 37e55cf0ceb8803 256bf69a3e45bd6 68bf90b76f 256bf69a3e45bd6 68bf90b76f
commit 37e55cf0ceb8803
Author: Jan Engelhardt <email address hidden>
Date: Fri Apr 24 17:05:21 2009 +0200
netfilter: xt_recent: fix stack overread in compat code
Related-to: commit 325fb5b4d26038c ba665dd0d8ee095 55321061f0
The compat path suffers from a similar problem. It only uses a __be32
when all of the recent code uses, and expects, an nf_inet_addr
everywhere. As a result, addresses stored by xt_recents were
filled with whatever other stuff was on the stack following the be32.
Signed-off-by: Jan Engelhardt <email address hidden>
With a minor compile fix from Roman.
Reported- and-tested- by: Roman Hoog Antink <email address hidden>
Signed-off-by: Patrick McHardy <email address hidden>