netfilter.vger.kernel.org archive mirror
 help / color / mirror / Atom feed
From: Mr Dash Four <mr.dash.four@googlemail.com>
To: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Cc: Jan Engelhardt <jengelh@medozas.de>, netfilter@vger.kernel.org
Subject: Re: [ANNOUNCE] ipset 6.5 released
Date: Sun, 22 May 2011 02:01:53 +0100	[thread overview]
Message-ID: <4DD86081.1020703@googlemail.com> (raw)
In-Reply-To: <alpine.DEB.2.00.1105220055320.24174@blackhole.kfki.hu>


> The uninitialized bytes are OK and there is no memory leak or corruption.
>   
I am able to now reproduce the error, having applied your patch Jozsef, 
rebuilt the kernel, updated the whole image on that machine and 
rebooted. This is what happens:

All sets are now loaded, *except* the last file where I get the 
segmentation fault error I described earlier, i.e, something like this:

May 22 01:25:20 dmz1 kernel: [ 1361.321376] ipset[2819]: segfault at 0 
ip 00e26655 sp bfdad710 error 4 in libmnl.so.0.0.1[e24000+4000]
May 22 01:26:39 dmz1 kernel: [ 1440.120529] ipset[2841]: segfault at 0 
ip 002d7655 sp bfbe7b10 error 4 in libmnl.so.0.0.1[2d5000+4000]

I started to narrow this down and the first culprit seems to be the 
following 2 statements:

n priviledged-ports bitmap:port range 1-1023 timeout 0
a priviledged-ports 1-1023

When I removed the above 2 statements I am then getting this:

ipset v6.5: Error in line 4: Internal protocol error

No segmentation fault! I narrowed the latest error down to the following 
2 statements:

n test-net bitmap:ip range 10.1.1.172/29 timeout 0
a test-net 10.1.1.172/29

I then removed those as well. Tried again - segmentation fault error. I 
then removed the following 3 statements, which were next in line:

n test-ports bitmap:port range 12770-19999 timeout 0
a test-ports 12770-12784
a test-ports 19999

Next, another segmentation fault error, it turns out the culprit this 
time was 2 statements which were further down the line from this file:

n test-port bitmap:port range 29950-29950 timeout 0
a test-port 29950

Removed these and guess what - segmentation fault error again, at which 
point I bloody gave up! ipset 4.5 it is!

  reply	other threads:[~2011-05-22  1:01 UTC|newest]

Thread overview: 44+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2011-05-15 13:50 [ANNOUNCE] ipset 6.5 released Jozsef Kadlecsik
2011-05-16 15:41 ` Mr Dash Four
2011-05-17  7:42   ` Jozsef Kadlecsik
2011-05-17 11:03     ` Mr Dash Four
2011-05-17 11:51       ` Jozsef Kadlecsik
2011-05-17 15:23         ` Mr Dash Four
2011-05-17 18:36           ` Mr Dash Four
2011-05-18  7:54             ` Jozsef Kadlecsik
2011-05-18 10:59               ` Mr Dash Four
2011-05-18 11:22                 ` Jozsef Kadlecsik
2011-05-21 19:42     ` Mr Dash Four
2011-05-21 19:45       ` Jozsef Kadlecsik
2011-05-21 19:58       ` Jozsef Kadlecsik
2011-05-21 20:11         ` Mr Dash Four
2011-05-21 21:31       ` Jozsef Kadlecsik
2011-05-21 21:33         ` Jan Engelhardt
2011-05-21 21:41           ` Mr Dash Four
2011-05-21 21:52             ` Jan Engelhardt
2011-05-21 23:08               ` Jozsef Kadlecsik
2011-05-22  1:01                 ` Mr Dash Four [this message]
2011-05-22 10:05                   ` Jozsef Kadlecsik
2011-05-22 10:36                     ` Jozsef Kadlecsik
2011-05-22 11:44                       ` Mr Dash Four
2011-05-22 11:44                     ` Mr Dash Four
2011-05-22 21:21                       ` Jozsef Kadlecsik
2011-05-22 21:32                         ` Mr Dash Four
2011-05-22 15:00                 ` Jan Engelhardt
2011-05-22 13:57               ` Mr Dash Four
2011-05-22 14:05                 ` Mr Dash Four
2011-05-21 21:51           ` Mr Dash Four
2011-05-21 21:41         ` Mr Dash Four
2011-05-21 22:28           ` Jozsef Kadlecsik
2011-05-21 22:41             ` Jozsef Kadlecsik
2011-05-21 22:44               ` Mr Dash Four
2011-05-21 22:42             ` Mr Dash Four
2011-05-22 14:52             ` Mr Dash Four
2011-05-21 22:15 ` Mr Dash Four
2011-05-21 22:31   ` Jozsef Kadlecsik
2011-05-21 22:42     ` Mr Dash Four
2011-05-21 22:49       ` Jozsef Kadlecsik
2011-05-21 22:57         ` Mr Dash Four
2011-05-21 23:25           ` Jozsef Kadlecsik
2011-05-21 23:33             ` Mr Dash Four
2011-05-22  9:56               ` Jozsef Kadlecsik

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4DD86081.1020703@googlemail.com \
    --to=mr.dash.four@googlemail.com \
    --cc=jengelh@medozas.de \
    --cc=kadlec@blackhole.kfki.hu \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).