summaryrefslogtreecommitdiffstats
path: root/Make_global.am
Commit message (Collapse)AuthorAgeFilesLines
* conntrackd: fix crash with IPv6 expectation in the filtering codePablo Neira Ayuso2013-07-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | Jul 5 00:41:06 sen-fw1 kernel: [274422.060695] conntrackd[4821]: segfault at 0 ip 000000000040c660 sp 00007fffebb098a8 error 4 in conntrackd[400000+3d000] > #0 0x000000000040f217 in jhash2 (k=0x0, length=4, initval=0) at ../include/jhash.h:99 > a = 2654435769 b = 2654435769 c = 0 len = 4 > #1 0x000000000040f564 in ct_filter_hash6 (data=0x0, table=0x16ef630) at filter.c:57 > #2 0x000000000040ad34 in hashtable_hash (table=0x16ef630, data=0x0) at hash.c:63 > #3 0x000000000040fd19 in __ct_filter_test_ipv6 (f=0x16eeba0, ct=0x1703760) at filter.c:265 > id_src = 51 id_dst = 24051376 src = 0x1703760 dst = 0x0 The master conntrack of the expectation has no reply tuple. However, the filtering routine needs it. To avoid this issue, emulate the source address in the reply tuple. While at it, fix incorrect sanity checking that should have caught this issue. Thanks to Florian Westphal for initial diagnosing of this bug. Reported-by: Bill Fink <billfink@mindspring.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: fix libraries dependencies in MakefilesNicolas Dichtel2012-09-211-1/+3
| | | | | | | | Several includes are missing when netfilter libs are not in the standard path. Signed-off-by: Nicolas Dichtel <nicolas.dichtel@6wind.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* src: integrate nfct into the conntrack-tools treePablo Neira Ayuso2012-05-261-2/+3
| | | | | | | | I'll need for the upcoming cthelper infrastructure. Moreover, we avoid more fragmentation in the netfilter user-space utilities. And the plan is that `nfct' will replace `conntrack' at some point. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: no need for error message in PKG_CHECK_MODULESJan Engelhardt2010-10-311-1/+2
| | | | | | | | | | | PKG_CHECK_MODULES already produces its own (and more verbose) messsage when a module cannot be found. Mucking around with CFLAGS and LIBS is also not needed since pkgconfig takes care of providing variables, so let's use them in Makefile.am. Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* build: drop unused $(all_includes)Jan Engelhardt2010-10-311-1/+1
| | | | Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
* build: replace INCLUDES by AM_CPPFLAGS according to autoreconfPablo Neira Ayuso2009-01-261-1/+1
| | | | | | | This patch replaces INCLUDES by AM_CPPFLAGS according to a suggestion from autoreconf. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* compilation: relax too strict warning checkingPablo Neira Ayuso2008-08-151-1/+0
| | | | | | | | | | This patch removes the -Werror option during the compilation. Some users have reported problems related to the code generated by flex and bison. This results in useless reports and a bad experience for end-users. Ideally, it would be great to have something like 'autoconf prettify' for less verbose output. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* enable C99 mode/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-01-171-1/+1
|
* Max Kellermann <max@duempel.org>:/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2008-01-151-0/+5
| | | | enable gcc warnings, including -Werror
* first step forward to merge conntrackd and conntrack into the same building ↵/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2007-04-161-0/+1
| | | | chain
* initial import of the conntrack daemon to Netfilter SVN/C=EU/ST=EU/CN=Pablo Neira Ayuso/emailAddress=pablo@netfilter.org2007-04-161-1/+0
|
* - get rid of KERNELDIR/C=DE/ST=Berlin/L=Berlin/O=Netfilter Project/OU=Development/CN=laforge/emailAddress=laforge@netfilter.org2005-11-141-0/+1
- use Make_global.am