Your message dated Mon, 02 Jan 2023 22:34:36 +0000
with message-id <[email protected]>
and subject line Bug#896716: fixed in libnetfilter-conntrack 1.0.9-3
has caused the Debian Bug report #896716,
regarding libnetfilter-conntrack3: Event filtering does not take effect on MIPS.
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
896716: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=896716
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libnetfilter-conntrack3
Version: 1.0.6-2
Severity: normal
Tags: upstream
Dear Maintainer,
Attaching a filter to a conntrack handle has no effect when compiled/run on a
MIPS machine.
I have included the source of a test case demonstrating the issue which prints a
summary when the state of an applicable connection changes. The filter applied
should ensure the callback is only called for TCP connections.
This works as expected on an x64 machine, but on a MIPS machine the filter has
no effect, the callback is triggered for all connections.
I have tried different filter types other than NFCT_FILTER_L4PROTO with the same
outcome.
-- System Information:
Debian Release: 9.4
APT prefers stable-updates
APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: mips
Kernel: Linux 4.9.0-6-4kc-malta
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8),
LANGUAGE=en_AU:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages libnetfilter-conntrack3 depends on:
ii libc6 2.24-11+deb9u3
ii libmnl0 1.0.4-2
ii libnfnetlink0 1.0.1-3
libnetfilter-conntrack3 recommends no packages.
libnetfilter-conntrack3 suggests no packages.
-- no debconf information
#include <stdio.h>
#include <libnetfilter_conntrack/libnetfilter_conntrack.h>
#include <libnetfilter_conntrack/libnetfilter_conntrack_tcp.h>
static int cb(enum nf_conntrack_msg_type type, struct nf_conntrack *ct, void
*data) {
char buf[1024];
nfct_snprintf(buf, sizeof(buf), ct, type, NFCT_O_PLAIN, NFCT_OF_TIME);
printf("%s\n", buf);
return NFCT_CB_CONTINUE;
}
int main() {
struct nfct_handle *h = nfct_open(CONNTRACK, NFCT_ALL_CT_GROUPS);
if (!h) {
perror("nfct_open");
return 1;
}
struct nfct_filter *filter = nfct_filter_create();
if (!filter) {
perror("nfct_create_filter");
return 1;
}
nfct_filter_add_attr_u32(filter, NFCT_FILTER_L4PROTO, IPPROTO_TCP);
if (nfct_filter_attach(nfct_fd(h), filter) == -1) {
perror("nfct_filter_attach");
return 1;
}
nfct_callback_register(h, NFCT_T_ALL, cb, NULL);
nfct_catch(h);
nfct_filter_destroy(filter);
nfct_close(h);
}
--- End Message ---
--- Begin Message ---
Source: libnetfilter-conntrack
Source-Version: 1.0.9-3
Done: Jeremy Sowden <[email protected]>
We believe that the bug you reported is fixed in the latest version of
libnetfilter-conntrack, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jeremy Sowden <[email protected]> (supplier of updated libnetfilter-conntrack
package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 02 Jan 2023 21:41:02 +0000
Source: libnetfilter-conntrack
Architecture: source
Version: 1.0.9-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Netfilter Packaging Team
<[email protected]>
Changed-By: Jeremy Sowden <[email protected]>
Closes: 896716
Changes:
libnetfilter-conntrack (1.0.9-3) unstable; urgency=medium
.
* [44c4074] d/gbp.conf: buildpackage: set `pristine-tar` to `false`
* [87333e7] d/rules: revert "export dpkg build-flags" since debhelper
manages them
* [f8833b6] d/control: bump Standards-Version to 4.6.2
* [1578d88] d/patches: rename patch
* [aab4027] d/patches: add patch to correct size of array
* [0e5055d] d/patches: add patch to fix endianness bug in filters
(Closes: #896716)
Checksums-Sha1:
26a177bfeff8df9ac7c09a88788aa32ab0898f55 2496
libnetfilter-conntrack_1.0.9-3.dsc
2810858c9b1ce43e20896e8cc35ab65a2fcc6eb0 10376
libnetfilter-conntrack_1.0.9-3.debian.tar.xz
5416cc817f0d6b6bd9d3fce6ef4c9c45a9e13b68 9560
libnetfilter-conntrack_1.0.9-3_amd64.buildinfo
Checksums-Sha256:
e150e8b701bffe515d140627d46d12c51aac8b36ae063028368fdc843cebcd26 2496
libnetfilter-conntrack_1.0.9-3.dsc
c6498c7dd9750d4855e2ec9bc217b9a480e953c55a1e4bc6b3d4b76f138643a5 10376
libnetfilter-conntrack_1.0.9-3.debian.tar.xz
75883de08c7ca3616f41944229b7cd3f7129ee6fd0f547b4f0ab445029361f13 9560
libnetfilter-conntrack_1.0.9-3_amd64.buildinfo
Files:
c39c52d4087b7047464d391ed91af33e 2496 libs optional
libnetfilter-conntrack_1.0.9-3.dsc
26b8af263a7847c9b3bc358767b538ec 10376 libs optional
libnetfilter-conntrack_1.0.9-3.debian.tar.xz
ab4c8f51218d75b205f9bb49e54f5a2f 9560 libs optional
libnetfilter-conntrack_1.0.9-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQJGBAEBCgAwFiEEbB20U2PvQDe9VtUXKYasCr3xBA0FAmOzVgkSHGplcmVteUBh
emF6ZWwubmV0AAoJECmGrAq98QQNiQgP+we01bb+H+gUtdhjqP4loBloKa3+pDR4
DBEMb1hy6XeQZYEav0UGbU+NvNYQcI1xHatwf0Chiwq2j3G5oXS48PyjyekRBeMt
2miCOKc3hc3PZd4wUZKYtOAEewemM2e9jY/g5w7MFS229bGUmjAfVPoY5Aolq63/
FMVqqK7LJZAHmgztfDiMAMGKkixM2sZVWlHpTAIKzLjLJiAc7lSwtT2BbitksvmP
DwF73woP1gkQZ9m/eDx4JLEbyTJNtZa9Bp2vWOl+uHqfhY5hkheYqQnifFz6wDyV
BOEgct/i85lRppiute0ytOmJ4UwFp2VJ7ShvsGtwD3oecN8hMNeUOdSuTpyUdTfc
dtSZBEgCxbb5y0N1L/ZeOGEt13aOJHJCQWNhRwNcqiEKcgxx/Uj6UHp3I8XVkMe+
H6PSlzvHqDNokehZRXDcovN5HQRWFDp3ZsRt79yHLmUwXBglQ8sJJ1kIyfAcnMoY
is2SeCHwDCDrKlp29r+6Te++caRYC0CRs+5hmPJMdhzwsbpGG9bsUWx5j/MJheA8
whABfTPxkzclCJtiUpD8qckPptivlx+xVO5MYQEFfqm5/JTV0fdRH66Z54SPj+C6
0utgtLMmfeE7zGfKddAN/oEgt7ynmLBoAGthtW5omf+XZMzGSpsT9fEKjJKly5cK
F6VVO6uv1uDu
=BU02
-----END PGP SIGNATURE-----
--- End Message ---
