Based on Roman's comment that a patch was merged for 2.6.29, I've
confirmed this patch is indeed in the latest Karmic Alpha kernel (see
commit id below).  I'm marking this Fix Released for Karmic which will
target a 2.6.31 kernel and has most recently rebased with 2.6.31-rc2
from upstream.  Images are available for testing at
http://cdimage.ubuntu.com/daily-live/current/ .  Thanks.

ogasaw...@emiko:~/ubuntu-karmic$ git log 
37e55cf0ceb8803256bf69a3e45bd668bf90b76f
commit 37e55cf0ceb8803256bf69a3e45bd668bf90b76f
Author: Jan Engelhardt <[email protected]>
Date:   Fri Apr 24 17:05:21 2009 +0200

    netfilter: xt_recent: fix stack overread in compat code
    
    Related-to: commit 325fb5b4d26038cba665dd0d8ee09555321061f0
    
    The compat path suffers from a similar problem. It only uses a __be32
    when all of the recent code uses, and expects, an nf_inet_addr
    everywhere. As a result, addresses stored by xt_recents were
    filled with whatever other stuff was on the stack following the be32.
    
    Signed-off-by: Jan Engelhardt <[email protected]>
    
    With a minor compile fix from Roman.
    
    Reported-and-tested-by: Roman Hoog Antink <[email protected]>
    Signed-off-by: Patrick McHardy <[email protected]>


** Changed in: linux (Ubuntu)
       Status: Incomplete => Fix Released

-- 
iptables "recent" match broken
https://bugs.launchpad.net/bugs/365539
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to