Hongxu Jia 17a49cd549 netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed in 64bit kernel ...

Since 09d9686047 ("netfilter: x_tables: do compat validation via
translate_table"), it used compatr structure to assign newinfo
structure.  In translate_compat_table of ip_tables.c and ip6_tables.c,
it used compatr->hook_entry to replace info->hook_entry and
compatr->underflow to replace info->underflow, but not do the same
replacement in arp_tables.c.

It caused invoking 32-bit "arptbale -P INPUT ACCEPT" failed in 64bit
kernel.
--------------------------------------
root@qemux86-64:~# arptables -P INPUT ACCEPT
root@qemux86-64:~# arptables -P INPUT ACCEPT
ERROR: Policy for `INPUT' offset 448 != underflow 0
arptables: Incompatible with this kernel
--------------------------------------

Fixes: 09d9686047 ("netfilter: x_tables: do compat validation via translate_table")
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2016-11-30 20:50:23 +01:00

..

arp_tables.c

netfilter: arp_tables: fix invoking 32bit "iptable -P INPUT ACCEPT" failed in 64bit kernel

2016-11-30 20:50:23 +01:00

arpt_mangle.c

…

arptable_filter.c

netfilter: arp_tables: register table in initns

2016-04-07 11:58:49 +02:00

ip_tables.c

netfilter: nft_log: complete NFTA_LOG_FLAGS attr support

2016-09-25 23:16:43 +02:00

ipt_ah.c

…

ipt_CLUSTERIP.c

…

ipt_ECN.c

…

ipt_MASQUERADE.c

…

ipt_REJECT.c

…

ipt_rpfilter.c

…

ipt_SYNPROXY.c

netfilter: ipv4: fix NULL dereference

2016-03-28 17:59:29 +02:00

iptable_filter.c

netfilter: xtables: don't hook tables by default

2016-03-02 20:05:24 +01:00

iptable_mangle.c

netfilter: x_tables: simplify ip{6}table_mangle_hook()

2016-07-01 16:37:02 +02:00

iptable_nat.c

netfilter: xtables: don't hook tables by default

2016-03-02 20:05:24 +01:00

iptable_raw.c

netfilter: xtables: don't hook tables by default

2016-03-02 20:05:24 +01:00

iptable_security.c

netfilter: xtables: don't hook tables by default

2016-03-02 20:05:24 +01:00

Kconfig

netfilter: remove ip_conntrack* sysctl compat code

2016-08-13 13:27:13 +02:00

Makefile

netfilter: remove ip_conntrack* sysctl compat code

2016-08-13 13:27:13 +02:00

nf_conntrack_l3proto_ipv4.c

netfilter: Remove explicit rcu_read_lock in nf_hook_slow

2016-09-24 21:29:53 +02:00

nf_conntrack_proto_icmp.c

netfilter: Remove explicit rcu_read_lock in nf_hook_slow

2016-09-24 21:29:53 +02:00

nf_defrag_ipv4.c

netfilter: nf_defrag_ipv4: Drop redundant ip_send_check()

2016-03-02 20:05:22 +01:00

nf_dup_ipv4.c

netfilter: nf_dup4: remove redundant checksum recalculation

2016-08-12 00:42:47 +02:00

nf_log_arp.c

netfilter: nft_log: complete NFTA_LOG_FLAGS attr support

2016-09-25 23:16:43 +02:00

nf_log_ipv4.c

netfilter: nf_log: get rid of XT_LOG_* macros

2016-09-25 23:16:45 +02:00

nf_nat_h323.c

…

nf_nat_l3proto_ipv4.c

netfilter: Allow calling into nat helper without skb_dst.

2016-03-14 23:47:27 +01:00

nf_nat_masquerade_ipv4.c

ipv4: Don't do expensive useless work during inetdev destroy.

2016-03-13 23:28:35 -04:00

nf_nat_pptp.c

…

nf_nat_proto_gre.c

netfilter: gre: Use consistent GRE and PTTP header structure instead of the ones defined by netfilter

2016-09-07 10:36:52 +02:00

nf_nat_proto_icmp.c

…

nf_nat_snmp_basic.c

net ipv4: use preferred log methods

2015-11-18 13:37:20 -05:00

nf_reject_ipv4.c

netfilter: nf_reject_ipv4: don't send tcp RST if the packet is non-TCP

2016-06-24 11:03:22 +02:00

nf_tables_arp.c

netfilter: Add the missed return value check of nft_register_chain_type

2016-09-12 19:54:45 +02:00

nf_tables_ipv4.c

netfilter: Add the missed return value check of nft_register_chain_type

2016-09-12 19:54:45 +02:00

nft_chain_nat_ipv4.c

…

nft_chain_route_ipv4.c

netfilter: nft_chain_route: re-route before skb is queued to userspace

2016-09-06 18:02:37 +02:00

nft_dup_ipv4.c

netfilter: nft_dup: do not use sreg_dev if the user doesn't specify it

2016-10-31 13:17:38 +01:00

nft_masq_ipv4.c

netfilter: nft_masq: support port range

2016-03-02 20:05:27 +01:00

nft_redir_ipv4.c

…

nft_reject_ipv4.c

netfilter: nft_reject: restrict to INPUT/FORWARD/OUTPUT

2016-08-25 12:55:34 +02:00