Re: Iptables ipt_unclean bug?

Kajtár Zsolt
2001-06-20T09:54:54Z

> In message <Pine.LNX.4.21.0106190104020.414-100000@firewall.sch.bme.hu>
> you write:
> >
> > Hi all!
> >
> > I think it's possible to hang the kernel useing isic 0.05
> > (www.packetfactory.net/Projects/ISIC/), when there's a unclean match
> > in iptables rules.

> Thanks for the bug report. I've just done an audit of the unclean
> code: patch against 2.4.5 is below. There were some bad thinkos there,
> two fatal.

2 infinite loops ;)

After patching now everything seems to be ok.

But there must be some other bug somewhere in TCP/IP stack or af_packet
(or my machine is just crap ;) ), because after ~5 mins I can still hang
my kernel on loopback WITHOUT iptables... Will check which one is on fault
on my home network...

-soci-