[Bug 404] Packets stuck in netfilter_queue after heavy loading

bugzilla-daemon at bugzilla.netfilter.org bugzilla-daemon at bugzilla.netfilter.org
Sun Mar 12 15:09:02 CET 2006


https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=404


kaber at trash.net changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|                            |FIXED




------- Additional Comments From kaber at trash.net  2006-03-12 15:09 MET -------
Turns out the problem is already fixed in current kernels. min_len in
nfnetlink_check_attributes was calculated incorrectly, which resulted in attrlen
beeing larger than the attribute really was. When the entire packet was parsed
we still had attrlen > 0, and if the memory contents behind the packet data by
accident looked like a valid attribute, it was also parsed, but usually didn't
contain valid attribute numbers, so the packet was dropped.

-- 
Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You reported the bug, or are watching the reporter.



More information about the netfilter-buglog mailing list