Your message dated Tue, 03 Dec 2019 13:20:15 +0000 with message-id <e1ic86b-000drt...@fasolo.debian.org> and subject line Bug#944669: fixed in nftables 0.9.3-1 has caused the Debian Bug report #944669, regarding nft: Memory allocation failure when using synproxy to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 944669: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=944669 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Package: nftables Version: 0.9.2-2 Severity: normal Dear Maintainer, nft crashes with "Memory allocation failure", when using synproxy. A simple test with the example from http://patchwork.ozlabs.org/patch/1120688/ root@buster:/home/user# cat > x table ip x { chain y { type filter hook prerouting priority raw; policy accept; tcp flags syn notrack } chain z { type filter hook input priority filter; policy accept; ct state { invalid, untracked } synproxy mss 1460 wscale 7 timestamp sack-perm ct state invalid drop } } root@buster:/home/user# nft -f x netlink.c:93: Memory allocation failure root@buster:/home/user# When I comment the synproxy statement, nft doesn't crash. I'm using Debian stable (buster), with only nftables from testing. nftables from buster-backports is crashing the same way. -- System Information: Debian Release: 10.1 APT prefers stable APT policy: (500, 'stable'), (50, 'testing') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-6-amd64 (SMP w/1 CPU core) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8) Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages nftables depends on: ii dpkg 1.19.7 ii libc6 2.28-10 ii libnftables1 0.9.2-2 ii libreadline8 8.0-3 nftables recommends no packages. Versions of packages nftables suggests: pn firewalld <none> -- no debconf information
--- End Message ---
--- Begin Message ---Source: nftables Source-Version: 0.9.3-1 We believe that the bug you reported is fixed in the latest version of nftables, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 944...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Arturo Borrero Gonzalez <art...@debian.org> (supplier of updated nftables package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 03 Dec 2019 14:03:14 +0100 Source: nftables Architecture: source Version: 0.9.3-1 Distribution: unstable Urgency: medium Maintainer: Debian Netfilter Packaging Team <pkg-netfilter-t...@lists.alioth.debian.org> Changed-By: Arturo Borrero Gonzalez <art...@debian.org> Closes: 916863 944669 Changes: nftables (0.9.3-1) unstable; urgency=medium . * This release was packaged and uploaded to Debian while on a 300km/h train. Hope it works :-) * [01e140c] New upstream version 0.9.3 Closes: #944669 Closes: #916863 * [1674c79] src:nftables: bump build-dep version on linftnl * [7074517] d/patches: drop patches included in latest upstream release Checksums-Sha1: 3a34037cf07d3b48d3da9337e5ccbec023d53128 2706 nftables_0.9.3-1.dsc 20156858169fde135a0b4c22c4cd9437afcbb733 786759 nftables_0.9.3.orig.tar.bz2 ee30da4f42286e0a0a1bc78f0fde0e14b2d7701d 866 nftables_0.9.3.orig.tar.bz2.asc 0e925598f796bb6b5122c618d41b9ac04c3e4c80 19756 nftables_0.9.3-1.debian.tar.xz bf50930c7dfa52c27a6ef7cf9960eb074f207132 8006 nftables_0.9.3-1_amd64.buildinfo Checksums-Sha256: 9b2355e5753ba91bae4e8858fa8ce49a7ab4ee41f4c1d6f546cf738b271a08b2 2706 nftables_0.9.3-1.dsc 956b915ce2a7aeaff123e49006be7a0690a0964e96c062703181a36e2e5edb78 786759 nftables_0.9.3.orig.tar.bz2 b29ec6ba678ad6b323a244c6e3340e846135697fa92fa06c265750bb62a26a70 866 nftables_0.9.3.orig.tar.bz2.asc a9bceaded6d71ff9ff7a159fb51c791eea5f5dc7ef3dcba8bc6500190183b060 19756 nftables_0.9.3-1.debian.tar.xz 9f3a5a5ff96bb2c13e5b0e6b39beb68db6d01a0092e076e6bddea9deec336b0e 8006 nftables_0.9.3-1_amd64.buildinfo Files: bca5b1c50c8cac9cb18f2d01256acc27 2706 net important nftables_0.9.3-1.dsc 9913b2b46864394d41916b74638e0875 786759 net important nftables_0.9.3.orig.tar.bz2 3ec829dac2c4f7f98b114c15206246c7 866 net important nftables_0.9.3.orig.tar.bz2.asc 0ce4f4b9beaf16b5825d787282bd8fcf 19756 net important nftables_0.9.3-1.debian.tar.xz 07a002645e4dca47943b0b6586a81ca6 8006 net important nftables_0.9.3-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE3ZhhqyPcMzOJLgepaOcTmB0VFfgFAl3mXl4ACgkQaOcTmB0V FfjOEA/+NuOIpg/g7vDndOFtlyUrvGcHn3N/lmLhbBt+tb4MQQZoxGDyZ0G2iUrY z+AGwNOqqC3my2ORL+GO6k8kCbGSMwLmf4z36Ey2wqaM8stVvQp+FqO0trshNOEO aSi2bgvgokkl3ugKo+wM4KJ9d2R98/l+rljl2Kd0pJAcFBrs5Bz8qHRx2niCZZWC 6IlcKESoOjzP+asBTM7yCYC2rNbOj4IGVBTFAQx+zk+zkkoulwRiOEqj45m9nOAM prGy47RcjiJyV/1UFL8eYtmbNVdeu2KSasVx/ilDf/vBs6E6jOleAaa/xEpWmsur T1yrmTLOApnbQy9wEQPNY6XHOQAAGPqCWzSa2BTPyIMLjgOI2T/dWGZZ6x9II/ky zvRmNpHrpZs9R6Vy0LBeBW8s3EaKDKIWZ3LfmnSypLTgrGVmVNaxOzItYYDr7KN9 DzJ3ewtus3L5mSXG8CkDdAN+VDrDwiKQJhUDn9YqcLuS0JKmuawtP7Eu2hV9RYmu olt5NLYhYieMakoM6/SZ14hG0HXhZYboa4zBLfceWyWZpbhewKU2JYF9+Jr2C2Zj bGfI2kfWBjuQ3Y46eMcsC6hH6GZxU8YdKUYio70TANMlKtFM8bJS69pqdy3oW8v2 IRfYU0H5soVTHaz4i0tCGL4cwRxddH2oTeBqBdt+44H1OO3P6XU= =cM/S -----END PGP SIGNATURE-----
--- End Message ---
