lp:xtables-addons

Created by Peter J. Mello on 2019-10-21 and last modified on 2019-12-01
Get this branch:
bzr branch lp:xtables-addons

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Xtables-addons Development
Project:
Xtables-addons
Status:
Development

Import details

Import Status: Reviewed

This branch is an import of the HEAD branch of the Git repository at git://git.code.sf.net/p/xtables-addons/xtables-addons.

The next import is scheduled to run in 57 minutes.

Last successful import was 5 hours ago.

Import started 5 hours ago on izar and finished 5 hours ago taking 20 seconds — see the log
Import started 11 hours ago on alnitak and finished 11 hours ago taking 15 seconds — see the log
Import started 17 hours ago on izar and finished 17 hours ago taking 15 seconds — see the log
Import started 23 hours ago on alnitak and finished 23 hours ago taking 15 seconds — see the log
Import started on 2019-12-09 on izar and finished on 2019-12-09 taking 15 seconds — see the log
Import started on 2019-12-09 on alnitak and finished on 2019-12-09 taking 30 seconds — see the log
Import started on 2019-12-09 on izar and finished on 2019-12-09 taking 15 seconds — see the log
Import started on 2019-12-08 on izar and finished on 2019-12-08 taking 15 seconds — see the log
Import started on 2019-12-08 on alnitak and finished on 2019-12-08 taking 15 seconds — see the log
Import started on 2019-12-08 on izar and finished on 2019-12-08 taking 20 seconds — see the log

Recent revisions

685. By Jan Engelhardt on 2019-12-01

Xtables-addons 3.7

684. By Jeremy Sowden on 2019-12-01

xt_geoip: fix in6_addr little-endian byte swapping

The Perl script that builds the GeoIP DBs uses inet_pton(3) to convert
the addresses to network byte order. This converts

  "1234:5678::90ab:cdef"

to:

  0x12 0x34 0x56 0x78 .. 0xcd 0xef, interpreted by an LE machine
  accessing this in uint32_t-sized chunks as
  8765:4321::fedc:ba09

The kernel module compares the addresses in packets with the ranges from
the DB in host byte order using binary search. It uses 32-bit swaps
when converting the addresses.

libxt_geoip, however, which the module uses to load the ranges from the
DB and convert them from NBO to HBO, uses 16-bit swaps to do so, and
this means that:

  1234:5678::90ab:cdef

becomes:

  4321:8765::ba09:fedc

Obviously, this is inconsistent with the kernel module and DB build
script and breaks the binary search.

Fixes: b91dbd03c717 ("geoip: store database in network byte order")
Reported-by: "Thomas B. Clark" <email address hidden>
Signed-off-by: Jeremy Sowden <email address hidden>

683. By Jeremy Sowden on 2019-12-01

build: update max. supported kernel version

The maximum supported version is reported as 5.3. Bump to 5.4.

Signed-off-by: Jeremy Sowden <email address hidden>

682. By Jan Engelhardt on 2019-11-20

Xtables-addons 3.6

681. By Paolo Pisati on 2019-11-20

build: add support for Linux 5.4

680. By Jan Engelhardt on 2019-09-10

Xtables-addons 3.5

679. By Jan Engelhardt on 2019-09-10

Merge MR-14

678. By Jan Engelhardt on 2019-09-06

Xtables-addons 3.4

677. By Jeremy Sowden on 2019-09-06

xt_pknock, xt_SYSRQ: do not set shash_desc::flags.

shash_desc::flags was removed from the kernel in 5.1.

That assignment was actually superfluous anyway, because crypto.desc
is zero-initialized when crypto is initialized (xt_pknock.c, ll.
110ff.).

Signed-off-by: Jeremy Sowden <email address hidden>

676. By Jan Engelhardt on 2019-09-06

treewide: replace skb_make_writable

skb_make_writable was removed in v5.3-rc1~140^2~370^2~1 .
Replace it with skb_ensure_writable that was introduced in
v3.19-rc1~118^2~153^2~2 .

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
This branch contains Public information 
Everyone can see this information.

Subscribers