From: Herbert Pötzl (herbert_at_13thfloor.at)
Date: Thu 17 Jul 2003 - 12:27:40 BST
On Thu, Jul 17, 2003 at 11:47:44AM +0200, Martin List-Petersen wrote:
> Citat Bjoern Stierand <bs_at_skyrix.com>:
>
> > Hi Dariush, hi list
> >
> > On Thursday, Jul 17, 2003, at 09:46 Europe/Berlin, Dariush Pietrzak
> > wrote:
> > >> I'm currently running 2.4.20 with ctx17 and grsec 1.9.9h over here,
> > >> cause the -ctx17 for 2.4.21 (both the official one and the one from
> > >> Herbert) caused some trouble.
> > > could you please detail what kind of trouble it caused?
> > Yeah, sure. The official patch didn't apply cleanly on udp.c iirc -
> > if didn't compile afterwards and some quick fix by me smashed the
> > whole UDP protocol - I didn't have time to investigate this any further.
> >
> > Herbert's patch seemed to freeze the kernel when booting - it worked for
> > a while, but then the server stopped after the kernel was uncompressed.
> > That didn't happen with the official -ctx17 patch. As I said earlier,
> > I didn't had time to investigate this in detail, so I switched back
> > to 2.4.20 for now.
hmm, I know I neglected the last 'stable' release,
because it seemed too buggy to me *G* ...
but anyway, are you sure that the official ctx17
for 2.4.21 didn't freeze the machine but the
unofficial does?
because except for cosmetic variations, the following
patch is the only difference between jacques test
version for 2.4.21 and my unofficial patch, which
might be responsible for your udp issues, but for
the freeze?
I will look into it ...
best,
Herbert
------------------
diff -u linux-2.4.21ctx17/net/ipv4/udp.c linux-2.4.21ctx-17/net/ipv4/udp.c
--- linux-2.4.21ctx17/net/ipv4/udp.c Wed Jun 25 21:59:16 2003
+++ linux-2.4.21ctx-17/net/ipv4/udp.c 2003-07-17 13:18:44.000000000 +0200
@@ -240,18 +240,18 @@
#if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
score = sk->family == PF_INET ? 1 : 0;
#else
- score = 1;
-#endif
- if(sk->rcv_saddr) {
- if(sk->rcv_saddr != daddr)
- continue;
- score+=2;
}else if (sk->ip_info != NULL){
if (udp_in_list (sk->ip_info,daddr)){
score++;
}else{
continue;
}
+ score = 1;
+#endif
+ if(sk->rcv_saddr) {
+ if(sk->rcv_saddr != daddr)
+ continue;
+ score+=2;
}
if(sk->daddr) {
if(sk->daddr != saddr)
> Sounds weird. I've got a system running stable for about a week now on 2.4.21,
> acpi20030619, herberts ctx17 patch + vquota.
>
> Regards,
> Martin List-Petersen
> martin at list-petersen dot dk
> --
> Q: How do you shoot a blue elephant?
> A: With a blue-elephant gun.
>
> Q: How do you shoot a pink elephant?
> A: Twist its trunk until it turns blue, then shoot it with
> a blue-elephant gun.