[Ipac-ng-developer] Problems with new iptables snapshots

[Dominik R. <d-...@ro...>]

Hi there,

as  already  posted  on the common list, I'll repost my problem
here because I think it's the more appropriate list:

I'm having problem using ipac-ng 1.33 cvs with a new version of
iptables. I'm using a current iptables snapshot:

# iptables -V
iptables v1.3.0-20050114

and fetchipac -S unfortunately results in:

# ./fetchipac -S
 calloc failed
: Cannot allocate memory

but worked before with iptables 1.2.11.

ipac.conf  and rules.conf are vanilla from the doc directory of
cvs.

./fetchipac -R
runs without problems.


I  started  tracing the calloc problem and found out that it is
caused in iptables.c prepare_entry()

The code beginning in iptables.c, line 1276 is:
   /* Loading target /if any/ */
   target = find_target(IPT_STANDARD_TARGET, LOAD_MUST_SUCCEED);
   size = sizeof(struct ipt_entry_target) + target->size;
   target->t = xcalloc(1, size);

Obviously  find_target  doesn't  work  properly,  the returning
target size is a bit too big :-)

gdb output:

   Starting program: /usr/src/ipac-ng-1.33/fetchipac -S
   [Thread debugging using libthread_db enabled]
   [New Thread -1211723648 (LWP 9796)]
   [Switching to Thread -1211723648 (LWP 9796)]

   Breakpoint 2, prepare_entry (d=0x80700d0, e=0x745b0) at iptables.c:1279
   1279            target->t = xcalloc(1, size);
   (gdb) print target->size
   $4 = 3083105344

Maybe this helps to fix the problem. Thanks!

Dominik

-- 

Dominik Roettsches
d-...@ro...