Re: [ANNOUNCE] ipset 6.12 released

[Andreas Herz <andi@xxxxxxxxxxxxxxx>]

On 10/05/12 at 12:18, Jozsef Kadlecsik wrote:
>  - Fix timeout value overflow bug at large timeout parameters
>    (bug reported by Andreas Herz)

I just tested and inspected your release, thanks for that.
But i can still reproduce the bug i reported.

You changed "ip_set_timeout_uget" but the bug occurs in
"ip_set_timeout_get" and the the userspace tool still reports a higher
range for the value (0-4294967).

> ipset create test hash:ip timeout 1000
> ipset add test 192.168.0.0/24 timeout 2147484
> ipset list

results in

> 192.168.0.0/24 timeout 1073741

on a 32 bit system.

But this is not really your fault, cause the kernel has a bug as i
mentioned here:

http://lkml.org/lkml/2012/4/20/36

But i didn't get a response yet :)

-- 
Andreas Herz
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html