[PATCH] netfilter fix for compat layer redirection

[Harald Welte]

Hi Dave!

This is a bugfix for the ipchains backwards compatibility layer, which 
currently has a memory hole. 

This memory hole was confirmed by several people using the redirect
functionality of the ipchains backwards compatibility module.

Please apply.

----- Forwarded message from Rusty Russell <rusty@rustcorp.com.au> -----

From: Rusty Russell <rusty@rustcorp.com.au>
To: laforge@gnumonks.org
Subject: [PATCH] Redirection fix for compat layer
Date: Tue, 27 Nov 2001 04:57:13 +1100


diff -urN -I \$.*\$ --exclude TAGS -X /home/rusty/devel/kernel/kernel-patches/current-dontdiff --minimal linux-2.4.7-official/net/ipv4/netfilter/ip_fw_compat_redir.c working-2.4.7-module/net/ipv4/netfilter/ip_fw_compat_redir.c
--- linux-2.4.7-official/net/ipv4/netfilter/ip_fw_compat_redir.c	Sat Aug  5 06:07:24 2000
+++ working-2.4.7-module/net/ipv4/netfilter/ip_fw_compat_redir.c	Wed Aug 15 20:45:02 2001
@@ -206,6 +206,8 @@
 			}
 			list_prepend(&redirs, redir);
 			init_timer(&redir->destroyme);
+			redir->destroyme.expires = jiffies + 75*HZ;
+			add_timer(&redir->destroyme);
 		}
 		/* In case mangling has changed, rewrite this part. */
 		redir->core = ((struct redir_core)
--
Premature optmztion is rt of all evl. --DK


----- End forwarded message -----

-- 
Live long and prosper
- Harald Welte / laforge@gnumonks.org               http://www.gnumonks.org/
============================================================================
GCS/E/IT d- s-: a-- C+++ UL++++$ P+++ L++++$ E--- W- N++ o? K- w--- O- M- 
V-- PS+ PE-- Y+ PGP++ t++ 5-- !X !R tv-- b+++ DI? !D G+ e* h+ r% y+(*)