Re: [PATCH] iptables 32bit compat layer

[Martin Josefsson <gandalf@wlug.westbo.se>]

[-- Attachment #1: Type: text/plain, Size: 1610 bytes --]

On Wed, 2006-03-29 at 14:47 +0200, Patrick McHardy wrote:
> Dmitry Mishin wrote:
> > On Wednesday 29 March 2006 16:32, Patrick McHardy wrote:
> >>
> >>I know, but SOL_IPV6 implies IP6T_* - but please don't bother sending
> >>a new patch for this :) So the point of the change is to exclude IPv6
> >>from the compat layer because its not implemented yet?
> > 
> > Exactly. Because do_netfilter_replace still works for some cases, but newer 
> > replacement isn't ready yet.
> 
> Ah OK. One last thing before I'll pass it on. There was one 64 bit
> architecture where iptables already worked with 32 bit userspace for
> some reason. I would like to make sure that it still works before it
> goes in because I can't debug it if it fails afterwards. I don't
> recall which arch it was, but I think Martin had one of these machines.
> Martin, could you give the compat patch a try?

It was an sparc64 machine with 32bit userspace I used for this testing.
Iirc, there was no problem adding/removing rules with the normal built
in matches and targets. The parts that were troublesome was some
matches/targets and rule counters.
That was worked around with very very very very ugly hacks in the
matches/targets in userspace, first an attempt to detect if we are
running 64/32 and if that's the case add some padding to some structs to
make the placement of used struct members match what's in kernel)

That machine (an old ultra1) hasn't seen electricity in a long time,
I'll see if I can dig it out this weekend unless someone else (dave?)
beats me to testing the patch.

-- 
/Martin

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]