Serious bug in ip6_tables

Brad Chapman kakadu@earthlink.net
Mon, 30 Jul 2001 20:03:32 -0400


This is a multi-part message in MIME format.
--------------070104090504090604030207
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit

Mr. Harald,

   Here is a patch to fix a _major_ bug in ip6_tables where if you
compile ip6_tables.o statically, but compile everything else as modules,
you can't get the module dependencies to work. It took me a while to figure
this out, since I was blaming it on ip6_conntrack, but below is a patch to
fix it.
   Please include.

Thanks,

Brad

<snip>

--- linux/net/ipv6/netfilter/ip6_tables.c	Mon Jul 30 19:14:52 2001
+++ linux/net/ipv6/netfilter/ip6_tables.c	Mon Jul 30 19:14:27 2001
@@ -1791,5 +1791,13 @@
 #endif
 }
 
+EXPORT_SYMBOL(ip6t_register_table);
+EXPORT_SYMBOL(ip6t_unregister_table);
+EXPORT_SYMBOL(ip6t_do_table);
+EXPORT_SYMBOL(ip6t_register_match);
+EXPORT_SYMBOL(ip6t_unregister_match);
+EXPORT_SYMBOL(ip6t_register_target);
+EXPORT_SYMBOL(ip6t_unregister_target);
+
 module_init(init);
 module_exit(fini);
--- linux/net/ipv6/netfilter/Makefile	Mon Jul 30 19:39:30 2001
+++ linux/net/ipv6/netfilter/Makefile	Mon Jul 30 19:39:21 2001
@@ -9,7 +9,7 @@
 
 O_TARGET := netfilter.o
 
-export-objs =
+export-objs = ip6_tables.o
 
 # Link order matters here.
 obj-$(CONFIG_IP6_NF_IPTABLES) += ip6_tables.o
<snip>

  

--------------070104090504090604030207
Content-Type: text/plain;
 name="exportip6syms.patch"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline;
 filename="exportip6syms.patch"

--- linux/net/ipv6/netfilter/ip6_tables.c	Mon Jul 30 19:14:52 2001
+++ linux/net/ipv6/netfilter/ip6_tables.c	Mon Jul 30 19:14:27 2001
@@ -1791,5 +1791,13 @@
 #endif
 }
 
+EXPORT_SYMBOL(ip6t_register_table);
+EXPORT_SYMBOL(ip6t_unregister_table);
+EXPORT_SYMBOL(ip6t_do_table);
+EXPORT_SYMBOL(ip6t_register_match);
+EXPORT_SYMBOL(ip6t_unregister_match);
+EXPORT_SYMBOL(ip6t_register_target);
+EXPORT_SYMBOL(ip6t_unregister_target);
+
 module_init(init);
 module_exit(fini);
--- linux/net/ipv6/netfilter/Makefile	Mon Jul 30 19:39:30 2001
+++ linux/net/ipv6/netfilter/Makefile	Mon Jul 30 19:39:21 2001
@@ -9,7 +9,7 @@
 
 O_TARGET := netfilter.o
 
-export-objs =
+export-objs = ip6_tables.o
 
 # Link order matters here.
 obj-$(CONFIG_IP6_NF_IPTABLES) += ip6_tables.o

--------------070104090504090604030207--