Re: [oops] in text matching

[Andrei Popa <andrei.popa@i-neo.ro>]

[-- Attachment #1: Type: text/plain, Size: 1948 bytes --]

On Thu, 2007-11-08 at 20:50 +0200, Andrei Popa wrote:
> On Thu, 2007-11-08 at 14:32 +0100, Patrick McHardy wrote:
> > Andrei Popa wrote:
> > > Please CC as i am not subscribed to the list.
> > > I-m using 2.6.22.9 and when I tried to insert this line it gave
> the
> > > oops:
> > > 
> > > $IPT -I INPUT -p tcp --dport 80 -m string --algo bm --string
> "$MyNick"
> > > -j DROP
> > > I have iptables v1.3.8
> > > 
> > > BUG: unable to handle kernel paging request at virtual address
> e0000000
> > >  printing eip:
> > > c01e2707
> > > *pde = 00000000
> > > Oops: 0000 [#1]
> > > CPU:    0
> > > EIP:    0060:[<c01e2707>]    Not tainted VLI
> > > EFLAGS: 00010286   (2.6.22.9-iteyeb11 #8)
> > > EIP is at bm_init+0xd7/0x210
> > 
> > 
> > Works fine here. Is the oops reproducible?
> > 
> > EFLAGS: 00010286   (2.6.22.9-iteyeb11 #8)
> >                               ^^^^^^^^
> > 
> > Does this include additional patches? Otherwise please post your
> > config and the lib/ts_bm.o file.
> 
> The oops is reproducible by this script (yyy are some IP addresses):
> 
> #!/bin/bash
> 
> IPT=/sbin/iptables
> 
> $IPT -F INPUT
> 
> $IPT -I INPUT -i lo -p tcp --dport 3306 -j ACCEPT
> $IPT -I INPUT -p tcp --dport 3306 -s yyy -j ACCEPT
> $IPT -I INPUT -p tcp --dport 3306 -s yyy -j ACCEPT
> $IPT -I INPUT -p tcp --dport 3306 -s yyy -j ACCEPT
> $IPT -I INPUT -p tcp --dport 3306 -s yyy -j ACCEPT
> 
> $IPT -A INPUT -p tcp --dport 3306 -j DROP
> 
> $IPT -I INPUT -p udp --dport 53 -m string --algo bm --string
> "ultra-online" -j DROP
> $IPT -I INPUT -p udp --dport 53 -m string --algo bm --string
> "ultracomp"
> -j DROP
> 
> $IPT -I INPUT -p tcp --dport 80 -m string --algo bm --string
> "N4675/adj/wwe." -j DROP
> $IPT -I INPUT -p tcp --dport 80 -m string --algo bm --string
> "/john/MOBILA" -j DROP
> #$IPT -I INPUT -p tcp --dport 80 -m string --algo bm --string
> "$MyNick"
> -j DROP

with the above line uncommented.

The lib/ts_bm.o file is attached.


[-- Attachment #2: ts_bm.o --]
[-- Type: application/x-object, Size: 2688 bytes --]