Re: kernel crash

[Gordon Messmer <yinyang@eburg.com>]

Martin Josefsson wrote:
> 
> Beware that conntrack in kernel 2.4.20 has a serious bug caused by core
> kernel changes. Can you please try 2.4.21-rc or apply at least
> submitted/10_confirm_fix.patch from patch-o-matic and run the same thing
> again and see if it still happens?

I've suggested the patch to the person responsible for the machine (I'm 
just helping him track this down).

> It appears that as if the reply-tuple is modified after the conntrack
> has been added to the hashtable (shouldn't happen). The only place this
> modification could happen is in ip_conntrack_alter_reply() which is
> called from ip_nat_setup_info() which in turn is called from various
> places to set up NAT mappings. But I can't find a place where it's
> called for a connection that's already in the hashtable...
> And the IP_NF_ASSERT() in ip_conntrack_alter_reply() would have
> triggered unless the conntrack had already been deleted from the
> lists...

Possibly memory corruption, then?

> 
> Which modules are you using?
> 

According to Mark:

lsmod
Module                  Size  Used by    Not tainted
ipt_MARK                 856   1  (autoclean)
ipt_LOG                 3320   1  (autoclean)
ipt_limit               1048   1  (autoclean)
ipt_REJECT              2840  13  (autoclean)
ipt_mark                 536   1  (autoclean)
iptable_mangle          2228   1  (autoclean)
ip_nat_ftp              3696   0  (unused)
ip_conntrack_ftp        4240   1  [ip_nat_ftp]
ipt_state                632   0  (unused)
ipt_multiport            728   0  (unused)
ipt_esp                  632   0  (unused)
ipt_MASQUERADE          1944   1
iptable_filter          1736   1
iptable_nat            21176   2  [ip_nat_ftp ipt_MASQUERADE]
ip_conntrack           28064   3  [ip_nat_ftp ip_conntrack_ftp ipt_state
				ipt_MASQUERADE iptable_nat]
ip_tables              13400  14  [ipt_MARK ipt_LOG ipt_limit ipt_REJECT
				ipt_mark iptable_mangle ipt_state
				ipt_multiport ipt_esp ipt_MASQUERADE
				iptable_filter iptable_nat]
ip_gre                  7584   0  (unused)
sk98lin               113136   1
e1000                  47980   1