thr3ads.net - netfilter buglog - [Bug 734] New: Iptables on Arm Processor with Vanilla Kernel [Aug 2011]

If this information is useful, please help other people find it:
Share via:

bugzilla-daemon at bugzilla.netfilter.org

2011-Aug-03 14:49 UTC

[Bug 734] New: Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734

           Summary: Iptables on Arm Processor with Vanilla Kernel
           Product: netfilter/iptables
           Version: linux-2.6.x
          Platform: arm
        OS/Version: Debian GNU/Linux
            Status: NEW
          Severity: critical
          Priority: P5
         Component: unknown
        AssignedTo: netfilter-buglog at lists.netfilter.org
        ReportedBy: aidjek at gmail.com
   Estimated Hours: 0.0


Created an attachment (id=360)
 --> (http://bugzilla.netfilter.org/attachment.cgi?id=360)
Kernel Config

We have a vanilla kernel, compiled for arm processor, also we have compiled
iptables sources in arm-toolchain and in result we cannot start iptables.

We have tested with different versions: 1.3.8, 1.4.3, 1.4.3.1, 1.4.3.2, 1.4.4,
1.4.5, 1.4.11, 1.4.12.
In all of them we have following errors: 


iptables v1.3.8: can't initialize iptables table `filter': Bad file
descriptor
Perhaps iptables or your kernel needs to be upgraded.

STRACE:
-------------------------------8<--------------------------------

execve("/mnt/db/updates/iptables",
["/mnt/db/updates/iptables", "-L"], [/* 10
vars */]) = 0
mmap2(NULL, 20, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
0x40009000
stat("/etc/ld.so.cache", 0xbeddf830)    = -1 ENOENT (No such file or
directory)
stat("/etc/ld.so.preload", 0xbeddf950)  = -1 ENOENT (No such file or
directory)
open("/mnt/dcu/mono/lib/libdl.so.0", O_RDONLY) = -1 ENOENT (No such
file or
directory)
open("/lib/libdl.so.0", O_RDONLY)       = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=13208, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
0x4000a000
read(3,
"\177ELF\1\1\1a\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\210\7\0\0004\0\0\0\360"...,
4096) = 4096
mmap2(NULL, 49152, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40012000
mmap2(0x40012000, 9096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0)
0x40012000
mmap2(0x4001c000, 4156, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x2)
0x4001c000
close(3)                                = 0
munmap(0x4000a000, 4096)                = 0
open("/mnt/dcu/mono/lib/libc.so.0", O_RDONLY) = -1 ENOENT (No such
file or
directory)
open("/lib/libc.so.0", O_RDONLY)        = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=580060, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
0x4000a000
read(3,
"\177ELF\1\1\1a\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0@\254\0\0004\0\0\0D"...,
4096) = 4096
mmap2(NULL, 614400, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x4001e000
mmap2(0x4001e000, 557648, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0)
0x4001e000
mmap2(0x400ae000, 5348, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x88)
0x400ae000
mmap2(0x400b0000, 15684, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x400b0000
close(3)                                = 0
munmap(0x4000a000, 4096)                = 0
open("/mnt/dcu/mono/lib/libc.so.0", O_RDONLY) = -1 ENOENT (No such
file or
directory)
open("/lib/libc.so.0", O_RDONLY)        = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=580060, ...}) = 0
close(3)                                = 0
stat("/lib/ld-uClibc.so.0", {st_mode=S_IFREG|0755, st_size=37620,
...}) = 0
mprotect(0x4001c000, 4096, PROT_READ)   = 0
mprotect(0x400ae000, 4096, PROT_READ)   = 0
mprotect(0x40010000, 4096, PROT_READ)   = 0
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) 0
ioctl(1, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) 0
socket(PF_INET, SOCK_RAW, IPPROTO_RAW)  = 3
getsockopt(3, SOL_IP, 0x40 /* IP_??? */,
"filter\0\306\2701(\300\24\0\0\0\377\7\0\0\340\334\326\306\200\0C\307$\335\326\306\16"...,
[84]) = 0
brk(0)                                  = 0x1b000
brk(0x1c000)                            = 0x1c000
getsockopt(3, SOL_IP, 0x41 /* IP_??? */, 0x1b078, 0xbeddfbc8) = -1 EINVAL
(Invalid argument)
close(3)                                = 0
open("/proc/sys/kernel/modprobe", O_RDONLY) = 3
read(3, "/sbin/modprobe\n"..., 1024)    = 15
close(3)                                = 0
fork()                                  = 1102
wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 1102
--- SIGCHLD (Child exited) @ 0 (0) ---
getsockopt(-1, SOL_IP, 0x40 /* IP_??? */, 0xbeddfb6c, 0xbeddfbc4) = -1 EBADF
(Bad file descriptor)
write(2, "iptables"..., 8iptables)              = 8
write(2, " v"..., 2 v)                    = 2
write(2, "1.3.8"..., 51.3.8)                 = 5
write(2, ": "..., 2: )                    = 2
write(2, "can't initialize iptables table `"..., 33can't
initialize iptables
table `) = 33
write(2, "filter"..., 6filter)                = 6
write(2, "': "..., 3': )                   = 3
write(2, "Bad file descriptor"..., 19Bad file descriptor)  = 19
write(2, "\n"..., 1
)                    = 1
write(2, "Perhaps iptables or your kernel n"..., 54Perhaps iptables or
your
kernel needs to be upgraded.
) = 54
exit(3)                                 = ?

-------------------------------8<--------------------------------


or this one: 



iptables v1.4.12: can't initialize iptables table `filter': Invalid
argument
Perhaps iptables or your kernel needs to be upgraded.

STRACE:
-------------------------------8<--------------------------------
execve("/mnt/db/iptables/sbin/iptables",
["/mnt/db/iptables/sbin/iptables",
"-L"], [/* 10 vars */]) = 0
mmap2(NULL, 20, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
0x40009000
stat("/etc/ld.so.cache", 0xbecbb830)    = -1 ENOENT (No such file or
directory)
stat("/etc/ld.so.preload", 0xbecbb950)  = -1 ENOENT (No such file or
directory)
open("/mnt/dcu/mono/lib/libiconv.so.2", O_RDONLY) = -1 ENOENT (No such
file or
directory)
open("/lib/libiconv.so.2", O_RDONLY)    = -1 ENOENT (No such file or
directory)
open("/lib/libiconv.so.2", O_RDONLY)    = -1 ENOENT (No such file or
directory)
open("/usr/lib/libiconv.so.2", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=910212, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
0x4000a000
read(3,
"\177ELF\1\1\1a\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\\\20\0\0004\0\0\0\354"...,
4096)
= 4096
mmap2(NULL, 942080, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40012000
mmap2(0x40012000, 906380, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0)
0x40012000
mmap2(0x400f7000, 3704, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0xdd)
0x400f7000
close(3)                                = 0
munmap(0x4000a000, 4096)                = 0
open("/mnt/dcu/mono/lib/libm.so.0", O_RDONLY) = -1 ENOENT (No such
file or
directory)
open("/lib/libm.so.0", O_RDONLY)        = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=146800, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
0x4000a000
read(3,
"\177ELF\1\1\1a\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\264\21\0\0004\0\0\0\360"...,
4096) = 4096
mmap2(NULL, 180224, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x400f8000
mmap2(0x400f8000, 140168, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0)
0x400f8000
mmap2(0x40122000, 4100, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x22)
0x40122000
close(3)                                = 0
munmap(0x4000a000, 4096)                = 0
open("/mnt/dcu/mono/lib/libc.so.0", O_RDONLY) = -1 ENOENT (No such
file or
directory)
open("/lib/libc.so.0", O_RDONLY)        = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=580060, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
0x4000a000
read(3,
"\177ELF\1\1\1a\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0@\254\0\0004\0\0\0D"...,
4096) = 4096
mmap2(NULL, 614400, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40124000
mmap2(0x40124000, 557648, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0)
0x40124000
mmap2(0x401b4000, 5348, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x88)
0x401b4000
mmap2(0x401b6000, 15684, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x401b6000
close(3)                                = 0
munmap(0x4000a000, 4096)                = 0
open("/mnt/dcu/mono/lib/libc.so.0", O_RDONLY) = -1 ENOENT (No such
file or
directory)
open("/lib/libc.so.0", O_RDONLY)        = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=580060, ...}) = 0
close(3)                                = 0
open("/mnt/dcu/mono/lib/libc.so.0", O_RDONLY) = -1 ENOENT (No such
file or
directory)
open("/lib/libc.so.0", O_RDONLY)        = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=580060, ...}) = 0
close(3)                                = 0
stat("/lib/ld-uClibc.so.0", {st_mode=S_IFREG|0755, st_size=37620,
...}) = 0
mprotect(0x40122000, 4096, PROT_READ)   = 0
mprotect(0x401b4000, 4096, PROT_READ)   = 0
mprotect(0x40010000, 4096, PROT_READ)   = 0
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) 0
ioctl(1, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) 0
socket(PF_INET, SOCK_RAW, IPPROTO_RAW)  = 3
getsockopt(3, SOL_IP, 0x40 /* IP_??? */,
"filter\0\306\340\234\324\306@\21\10\300<\316\7\300\f\235\324\306\360\234\324\306,\313\5\300\16"...,
[84]) = 0
brk(0)                                  = 0xaf000
brk(0xb0000)                            = 0xb0000
getsockopt(3, SOL_IP, 0x41 /* IP_??? */, 0xaf090, 0xbecbbad4) = -1 EINVAL
(Invalid argument)
close(3)                                = 0
lstat64("/proc/net/ip_tables_names", {st_mode=S_IFREG|0440, st_size=0,
...}) 0
statfs("/proc/net/ip_tables_names",
{f_type="PROC_SUPER_MAGIC", f_bsize=4096,
f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={0, 0},
f_namelen=255, f_frsize=4096}) = 0
socket(PF_INET, SOCK_RAW, IPPROTO_RAW)  = 3
getsockopt(3, SOL_IP, 0x40 /* IP_??? */,
"filter\0\306\340\234\324\306\324\23\t\300@%\20\300\310\236\324\306\370\7D\307\251\1\0\360\16"...,
[84]) = 0
getsockopt(3, SOL_IP, 0x41 /* IP_??? */, 0xaf090, 0xbecbbad4) = -1 EINVAL
(Invalid argument)
close(3)                                = 0
write(2, "iptables"..., 8iptables)              = 8
write(2, " v"..., 2 v)                    = 2
write(2, "1.4.12"..., 61.4.12)                = 6
write(2, ": "..., 2: )                    = 2
write(2, "can't initialize iptables table `"..., 33can't
initialize iptables
table `) = 33
write(2, "filter"..., 6filter)                = 6
write(2, "': "..., 3': )                   = 3
write(2, "Invalid argument"..., 16Invalid argument)     = 16
write(2, "\n"..., 1
)                    = 1
write(2, "Perhaps iptables or your kernel n"..., 54Perhaps iptables or
your
kernel needs to be upgraded.
) = 54
exit(3)                                 = ?

-------------------------------8<--------------------------------

or another error:

getsockopt failed strangely: Invalid argument

STRACE:

----------------------8<--------------------------

execve("/mnt/db/iptables/sbin/iptables-static",
["/mnt/db/iptables/sbin/iptables-s"..., "-L"], [/* 9 vars
*/]) = 0
mmap2(NULL, 20, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
0x40009000
stat("/etc/ld.so.cache", 0xbea79840)    = -1 ENOENT (No such file or
directory)
stat("/etc/ld.so.preload", 0xbea79960)  = -1 ENOENT (No such file or
directory)
open("/mnt/dcu/mono/lib/libiconv.so.2", O_RDONLY) = -1 ENOENT (No such
file or
directory)
open("/lib/libiconv.so.2", O_RDONLY)    = -1 ENOENT (No such file or
directory)
open("/lib/libiconv.so.2", O_RDONLY)    = -1 ENOENT (No such file or
directory)
open("/usr/lib/libiconv.so.2", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=910212, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
0x4000a000
read(3,
"\177ELF\1\1\1a\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\\\20\0\0004\0\0\0\354"...,
4096)
= 4096
mmap2(NULL, 942080, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40012000
mmap2(0x40012000, 906380, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0)
0x40012000
mmap2(0x400f7000, 3704, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0xdd)
0x400f7000
close(3)                                = 0
munmap(0x4000a000, 4096)                = 0
open("/mnt/dcu/mono/lib/libiptc.so.0", O_RDONLY) = -1 ENOENT (No such
file or
directory)
open("/lib/libiptc.so.0", O_RDONLY)     = 3
fstat(3, {st_mode=S_IFREG|0755, st_size=75611, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
0x4000a000
read(3,
"\177ELF\1\1\1a\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\270\25\0\0004\0\0\0\314"...,
4096) = 4096
mmap2(NULL, 94208, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x400f8000
mmap2(0x400f8000, 60216, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0)
0x400f8000
mmap2(0x4010e000, 4032, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0xe)
0x4010e000
close(3)                                = 0
munmap(0x4000a000, 4096)                = 0
open("/mnt/dcu/mono/lib/libm.so.0", O_RDONLY) = -1 ENOENT (No such
file or
directory)
open("/lib/libm.so.0", O_RDONLY)        = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=146800, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
0x4000a000
read(3,
"\177ELF\1\1\1a\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\264\21\0\0004\0\0\0\360"...,
4096) = 4096
mmap2(NULL, 180224, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x4010f000
mmap2(0x4010f000, 140168, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0)
0x4010f000
mmap2(0x40139000, 4100, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x22)
0x40139000
close(3)                                = 0
munmap(0x4000a000, 4096)                = 0
open("/mnt/dcu/mono/lib/libc.so.0", O_RDONLY) = -1 ENOENT (No such
file or
directory)
open("/lib/libc.so.0", O_RDONLY)        = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=580060, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
0x4000a000
read(3,
"\177ELF\1\1\1a\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0@\254\0\0004\0\0\0D"...,
4096) = 4096
mmap2(NULL, 614400, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x4013b000
mmap2(0x4013b000, 557648, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0)
0x4013b000
mmap2(0x401cb000, 5348, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x88)
0x401cb000
mmap2(0x401cd000, 15684, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x401cd000
close(3)                                = 0
munmap(0x4000a000, 4096)                = 0
open("/mnt/dcu/mono/lib/libc.so.0", O_RDONLY) = -1 ENOENT (No such
file or
directory)
open("/lib/libc.so.0", O_RDONLY)        = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=580060, ...}) = 0
close(3)                                = 0
open("/mnt/dcu/mono/lib/libiconv.so.2", O_RDONLY) = -1 ENOENT (No such
file or
directory)
open("/lib/libiconv.so.2", O_RDONLY)    = -1 ENOENT (No such file or
directory)
open("/lib/libiconv.so.2", O_RDONLY)    = -1 ENOENT (No such file or
directory)
open("/usr/lib/libiconv.so.2", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=910212, ...}) = 0
close(3)                                = 0
open("/mnt/dcu/mono/lib/libc.so.0", O_RDONLY) = -1 ENOENT (No such
file or
directory)
open("/lib/libc.so.0", O_RDONLY)        = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=580060, ...}) = 0
close(3)                                = 0
open("/mnt/dcu/mono/lib/libc.so.0", O_RDONLY) = -1 ENOENT (No such
file or
directory)
open("/lib/libc.so.0", O_RDONLY)        = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=580060, ...}) = 0
close(3)                                = 0
stat("/lib/ld-uClibc.so.0", {st_mode=S_IFREG|0755, st_size=37620,
...}) = 0
mprotect(0x40139000, 4096, PROT_READ)   = 0
mprotect(0x401cb000, 4096, PROT_READ)   = 0
mprotect(0x40010000, 4096, PROT_READ)   = 0
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) 0
ioctl(1, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) 0
socket(PF_INET, SOCK_RAW, IPPROTO_RAW)  = 3
open("/proc/sys/kernel/modprobe", O_RDONLY|O_LARGEFILE) = 4
brk(0)                                  = 0xa7000
brk(0xa8000)                            = 0xa8000
read(4, "/sbin/modprobe\n"..., 1024)    = 15
close(4)                                = 0
fork()                                  = 1086
wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 1086
--- SIGCHLD (Child exited) @ 0 (0) ---
getsockopt(3, SOL_IP, 0x42 /* IP_??? */, 0xbea79c60, 0xbea79c5c) = -1 EINVAL
(Invalid argument)
write(2, "getsockopt failed strangely: "..., 29getsockopt failed
strangely: ) 29
write(2, "Invalid argument"..., 16Invalid argument)     = 16
write(2, "\n"..., 1
)                    = 1
exit(1)                                 = ?
----------------------8<--------------------------

For last error we have found that iptables need to be configure with flags
--enable-shared --enable-static, but after fixing this error we got one of two
first errors. (use this
http://tech.groups.yahoo.com/group/ts-7000/message/20415)

uname -a
Linux Router7 2.6.27.53-rtr7 #55 Tue Jun 21 11:02:32 EEST 2011 armv4tl
GNU/Linux

Also we have tried to build iptables versions 1.4.1 and 1.4.2 - as more
compatible for our kernel, but every time we have an error in make procedure:

iptables_static-xtables.o: In function `ip6parse_hostnetworkmask':
xtables.c:(.text+0x2edc): undefined reference to `in6addr_any'
collect2: ld returned 1 exit status
make[2]: *** [iptables-static] Error 1


As described in this bug: http://bugzilla.netfilter.org/show_bug.cgi?id=569


All requiered modules is loading in kernel:

lsmod
iptable_nat 5256 0 - Live 0xbf04c000
nf_nat 17558 1 iptable_nat, Live 0xbf046000
nf_conntrack_ipv4 14668 3 iptable_nat,nf_nat, Live 0xbf041000
nf_conntrack 67276 3 iptable_nat,nf_nat,nf_conntrack_ipv4, Live 0xbf02f000
iptable_filter 2752 0 - Live 0xbf02d000
ip_tables 11472 2 iptable_nat,iptable_filter, Live 0xbf029000
x_tables 15268 2 iptable_nat,ip_tables, Live 0xbf024000



filename:      
/lib/modules/2.6.27.53-rtr7/kernel/net/ipv4/netfilter/iptable_nat.ko
license:        GPL
vermagic:       2.6.27.53-rtr7 mod_unload modversions ARMv4
filename:       /lib/modules/2.6.27.53-rtr7/kernel/net/ipv4/netfilter/nf_nat.ko
license:        GPL
vermagic:       2.6.27.53-rtr7 mod_unload modversions ARMv4
filename:      
/lib/modules/2.6.27.53-rtr7/kernel/net/ipv4/netfilter/nf_conntrack_ipv4.ko
license:        GPL
vermagic:       2.6.27.53-rtr7 mod_unload modversions ARMv4
filename:      
/lib/modules/2.6.27.53-rtr7/kernel/net/netfilter/nf_conntrack.ko
license:        GPL
vermagic:       2.6.27.53-rtr7 mod_unload modversions ARMv4
parm:           acct:Enable connection tracking flow accounting.
filename:      
/lib/modules/2.6.27.53-rtr7/kernel/net/ipv4/netfilter/iptable_filter.ko
description:    iptables filter table
author:         Netfilter Core Team <coreteam at netfilter.org>
license:        GPL
vermagic:       2.6.27.53-rtr7 mod_unload modversions ARMv4
filename:      
/lib/modules/2.6.27.53-rtr7/kernel/net/ipv4/netfilter/ip_tables.ko
description:    IPv4 packet filter
author:         Netfilter Core Team <coreteam at netfilter.org>
license:        GPL
vermagic:       2.6.27.53-rtr7 mod_unload modversions ARMv4
filename:       /lib/modules/2.6.27.53-rtr7/kernel/net/netfilter/x_tables.ko
description:    [ip,ip6,arp]_tables backend module
author:         Harald Welte <laforge at netfilter.org>
license:        GPL


uname -a
Linux Router7 2.6.27.53-rtr7 #55 Tue Jun 21 11:02:32 EEST 2011 armv4tl
GNU/Linux


Kernel Config is in attachment.

Please let us know if you need more info. 

Also please help me to understand causes of this: kernel, it's modules, tool
chain or anything in your source code.

If anyone has any suggestions on how I might resolve this error to get iptables
working, I'd be very appreciative.

Thank you in advance, Evgheni.


P.S. I will try to compile iptables on another tool chains and will let you
know about results.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Aug-10 09:55 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734


Jan Engelhardt <jengelh at medozas.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jengelh at medozas.de




--- Comment #1 from Jan Engelhardt <jengelh at medozas.de>  2011-08-10
11:55:53 ---
Check out and report back the results from cctypeinfo.c.
http://dev.medozas.de/gitweb.cgi?p=hxtools;a=blob;f=sdevel/cctypeinfo.c;hb=HEAD

There may also be messages in dmesg to explain EINVAL further.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Aug-10 13:11 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734


Evgheni <aidjek at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |aidjek at gmail.com




--- Comment #2 from Evgheni <aidjek at gmail.com>  2011-08-10 15:11:30 ---
(In reply to comment #1)> Check out and report back the results from cctypeinfo.c.
>
http://dev.medozas.de/gitweb.cgi?p=hxtools;a=blob;f=sdevel/cctypeinfo.c;hb=HEAD
> 
> There may also be messages in dmesg to explain EINVAL further.
> 

Hello Jan, thank you for your help. 

I have compiled this source code: the output is presented below

          TYPE  SIZEOF ALIGNOF
          char       1       1
         short       2       2
           int       4       4
          long       4       4
     long long       8       4
         float       4       4
        double       8       4
   long double       8       4
        void *       4       4
void (*)(void)       4       4
      intptr_t       4       4
        size_t       4       4
       wchar_t       4       4
         off_t       4       4
        loff_t       8       4
       uint8_t       1       1
      uint16_t       2       2
      uint32_t       4       4
      uint64_t       8       4
    struct x16       4       4
    struct x32       8       4
    struct x64      16       4
        mode_t       4       4
        time_t       4       4
struct timespec       8       4
struct sockaddr      16       4
struct sockaddr_in      16       4
struct sockaddr_in6      28       4
struct sockaddr_storage     128       4


Also I have tried to recompile needed kernel modules for iptables work:
net/netfilter/x_tables.ko, net/ipv4/netfilter/ip_tables.ko and
net/ipv4/netfilter/iptable_filter.ko  but without any positive result. 

I have tried to enable debugging for this modules and rebuild kernel included
those modules in it, not as single modules - but also without result.

I have check ABI flags for all binaries (modules and iptables), as was
described here http://wiki.debian.org/ArmEabiPort - result presented below:

home/aidjek/iptables-1.4.12/build/bin/sbin# readelf -h iptables | grep Flags 
  Flags:                             0x202, has entry point, GNU EABI, software
FP

readelf -h /home/aidjek/iptables-1.4.3.2/build/bin/sbin/iptables | grep Flags 
  Flags:                             0x202, has entry point, GNU EABI, software
FP

readelf -h net/ipv4/netfilter/ip_tables.ko | grep Flag
  Flags:                             0x200, GNU EABI, software FP

readelf -h net/ipv4/netfilter/ip_tables.ko | grep Flag
  Flags:                             0x200, GNU EABI, software FP


Also tried to recompile kernel modules from original source code and have found
another errors in dmesg: 
[442992.546875] translate_table: size 632
[442992.570312] Finished chain 1
[442992.578125] Finished chain 2
[442992.585937] Finished chain 3
[442992.593750] ip_tables:  target: invalid size 12 != 8

But I think it's incompatibility of modules version or anything else,
because
module iptable_filter.ko - cannot load in this situation.

Also I am discussing this issue on different  russian significant linux
communities and will let you know - if anything will be usefully for this
issue.

Also I have make one more strace outputs : http://pastebin.com/DvxVcUiT 
one of it - it's execute command "iptables -L" , another 
"iptables --version"

Please let me know if you need further assistance or info.

Thank you in advance, Evgheni.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Aug-26 20:35 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734


Tom <xsited at yahoo.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |xsited at yahoo.com




--- Comment #3 from Tom <xsited at yahoo.com>  2011-08-26 22:35:23 ---
I would like to tag along if you don't mind as it seems relevant and
similar.
Thanks

# strace iptables -L
execve("/sbin/iptables", ["iptables", "-L"], [/*
12 vars */]) = 0
brk(0)                                  = 0x63000
uname({sys="Linux", node="viz", ...}) = 0

...

open("/lib/libip4tc.so.0", O_RDONLY)    = 3
read(3,
"\177ELF\1\1\1a\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\240\16\0\0004\0\0\0"...,
512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=21884, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
0x4001a000
mmap2(NULL, 53504, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0)
0x40023000
mprotect(0x40028000, 28672, PROT_NONE)  = 0
mmap2(0x4002f000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4) = 0x4002f000
close(3)                                = 0
open("/lib/libxtables.so.7", O_RDONLY)  = 3
read(3,
"\177ELF\1\1\1a\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\200!\0\0004\0\0\0"...,
512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=38500, ...}) = 0
mmap2(NULL, 71392, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0)
0x40031000
mprotect(0x4003a000, 28672, PROT_NONE)  = 0
mmap2(0x40041000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8) = 0x40041000
close(3)                                = 0
open("/lib/libm.so.6", O_RDONLY)        = 3
read(3,
"\177ELF\1\1\1a\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\00083\0\0004\0\0\0"...,
512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=654536, ...}) = 0
mmap2(NULL, 684236, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0)
0x40043000
mprotect(0x400e2000, 28672, PROT_NONE)  = 0
mmap2(0x400e9000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9e) = 0x400e9000
close(3)                                = 0
open("/lib/libc.so.6", O_RDONLY)        = 3
read(3,
"\177ELF\1\1\1a\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0Pd\1\0004\0\0\0"...,
512)
= 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1128020, ...}) = 0
mmap2(NULL, 1164200, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0)
0x400eb000
mprotect(0x401fa000, 32768, PROT_NONE)  = 0
mmap2(0x40202000, 12288, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10f) = 0x40202000
mmap2(0x40205000, 9128, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40205000
close(3)                                = 0
open("/lib/libdl.so.2", O_RDONLY)       = 3
read(3,
"\177ELF\1\1\1a\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\300\n\0\0004\0\0\0"...,
512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=9708, ...}) = 0
mmap2(NULL, 41188, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0)
0x40208000
mprotect(0x4020a000, 28672, PROT_NONE)  = 0
mmap2(0x40211000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1) = 0x40211000
close(3)                                = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
0x4001b000
set_tls(0x4001b860, 0x4001b860, 0x4001bfb8, 0x4001bf38, 0x40022044) = 0
mprotect(0x40211000, 4096, PROT_READ)   = 0
mprotect(0x40202000, 8192, PROT_READ)   = 0
mprotect(0x400e9000, 4096, PROT_READ)   = 0
mprotect(0x40041000, 4096, PROT_READ)   = 0
mprotect(0x4002f000, 4096, PROT_READ)   = 0
mprotect(0x1a000, 4096, PROT_READ)      = 0
mprotect(0x40021000, 4096, PROT_READ)   = 0
socket(PF_INET, SOCK_RAW, IPPROTO_RAW)  = 3
getsockopt(3, SOL_IP, 0x40 /* IP_??? */,
"filter\0\303\223\0\0\240\23\0\0`\340&\213\303\5\0\0\0d\246\2\300\0\300/\303"...,
[84]) = 0
brk(0)                                  = 0x63000
brk(0x84000)                            = 0x84000
getsockopt(3, SOL_IP, 0x41 /* IP_??? */, 0x63090, 0xbecbfb6c) = -1 EINVAL
(Invalid argument)
close(3)                                = 0
lstat64("/proc/net/ip_tables_names", {st_mode=S_IFREG|0440, st_size=0,
...}) 0
statfs("/proc/net/ip_tables_names",
{f_type="PROC_SUPER_MAGIC", f_bsize=4096,
f_blocks=0, f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={0, 0},
f_namelen=255, f_frsize=4096}) = 0
socket(PF_INET, SOCK_RAW, IPPROTO_RAW)  = 3
getsockopt(3, SOL_IP, 0x40 /* IP_??? */,
"filter\0\303\223\0\0\240\23\0\0`\340&\213\303\5\0\0\0d\246\2\300\0\300/\303"...,
[84]) = 0
getsockopt(3, SOL_IP, 0x41 /* IP_??? */, 0x63090, 0xbecbfb6c) = -1 EINVAL
(Invalid argument)
close(3)                                = 0
write(2, "iptables v1.4.12: ", 18iptables v1.4.12: )      = 18
write(2, "can't initialize iptables table "..., 58can't
initialize iptables
table `filter': Invalid argument) = 58
open("/lib/libgcc_s.so.1", O_RDONLY)    = 3
read(3,
"\177ELF\1\1\1a\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0x\36\0\0004\0\0\0"...,
512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=46512, ...}) = 0
mmap2(NULL, 78408, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0)
0x40213000
mprotect(0x4021e000, 28672, PROT_NONE)  = 0
mmap2(0x40225000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa) = 0x40225000
close(3)                                = 0
mprotect(0x40225000, 4096, PROT_READ)   = 0
write(2, "\n", 1
)                       = 1
write(2, "Perhaps iptables or your kernel "..., 54Perhaps iptables or
your
kernel needs to be upgraded.
) = 54
exit_group(3)                           = ?


# cat /proc/net/ip_tables_names
nat
mangle
filter


Linux viz 2.6.33.5-at91 #2 Wed Aug 24 13:16:37 PDT 2011 armv5tejl GNU/Linux
iptables v1.4.12

# cctypeinfo 
          TYPE   SIZEOF  ALIGNOF
          char        1        1
         short        2        2
           int        4        4
          long        4        4
     long long        8        4
         float        4        4
        double        8        4
   long double        8        4
        void *        4        4
void (*)(void)        4        4
      intptr_t        4        4
        size_t        4        4
       wchar_t        4        4
         off_t        4        4
        loff_t        8        4
       uint8_t        1        1
      uint16_t        2        2
      uint32_t        4        4
      uint64_t        8        4
    struct x16        4        4
    struct x32        8        4
    struct x64       16        4
        mode_t        4        4
        time_t        4        4
struct timespec        8        4
struct sockaddr       16        4
struct sockaddr_in       16        4
struct sockaddr_in6       28        4
struct sockaddr_storage      128        4


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Aug-26 20:40 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734





--- Comment #4 from Evgheni <aidjek at gmail.com>  2011-08-26 22:40:52 ---
(In reply to comment #3)> I would like to tag along if you don't mind as it seems relevant and
similar.
> Thanks
> 
Hello 

May be this is looking as similar, but I cannot understand why all kernel
modules loading successfully, but iptables not. 

May be anybody can advice how to make more informatical debugging for iptables
and it's kernel modules.

Thank you in advance.

Evgheni.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Aug-27 17:15 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734





--- Comment #5 from Tom <xsited at yahoo.com>  2011-08-27 19:15:53 ---
(In reply to comment #4)> (In reply to comment #3)
> > I would like to tag along if you don't mind as it seems relevant
and similar.
> > Thanks
> > 
> 
> Hello 
> 
> May be this is looking as similar, but I cannot understand why all kernel
> modules loading successfully, but iptables not. 
> 
> May be anybody can advice how to make more informatical debugging for
iptables
> and it's kernel modules.
> 
> Thank you in advance.
> 
> Evgheni.
> 
Thanks for your reply.  It is important to point out the modules are compiled
directly into the kernel. also i have use the kernel config successfully before
in the past.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Aug-27 17:24 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734





--- Comment #6 from Evgheni <aidjek at gmail.com>  2011-08-27 19:24:46 ---
(In reply to comment #5)
> Thanks for your reply.  It is important to point out the modules are
compiled
> directly into the kernel. also i have use the kernel config successfully
before
> in the past.
> 
Hello, I have tried to compile modules directly into kernel and as separate
modules, loading  with insmod. The results of both operations were similar,
iptables - didn't work.

For now I'm at holiday and will return to work at 5 of September, I will try
to
recompile modules directly into kernel for excluding any mistakes in my
explanations. 

New strace output - will attach too.


WBR, Evgheni 


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Aug-27 17:25 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734





--- Comment #7 from Jan Engelhardt <jengelh at medozas.de>  2011-08-27
19:25:17 ---
Created an attachment (id=364)
 --> (http://bugzilla.netfilter.org/attachment.cgi?id=364)
This is cctypeinfo, for the kernel.

Please build and run this module. It's cctypeinfo, just tweaked a little for
kernelspace rather than userspace.
Note that upon insmod, it will always return -EIO, which is intentional. The
result is printed to dmesg nevertheless, so check there after insmod.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Aug-27 17:27 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734





--- Comment #8 from Evgheni <aidjek at gmail.com>  2011-08-27 19:27:01 ---
(In reply to comment #7)> Created an attachment (id=364) --> (http://bugzilla.netfilter.org/attachment.cgi?id=364)
[details]> This is cctypeinfo, for the kernel.
> 
> Please build and run this module. It's cctypeinfo, just tweaked a
little for
> kernelspace rather than userspace.
> Note that upon insmod, it will always return -EIO, which is intentional.
The
> result is printed to dmesg nevertheless, so check there after insmod.
> 
Thank you Jan, I will do it during next 24 hours and will report you results.

WBR, Evgheni


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Aug-27 17:55 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734





--- Comment #9 from Evgheni <aidjek at gmail.com>  2011-08-27 19:55:58 ---
(In reply to comment #7)> Created an attachment (id=364) --> (http://bugzilla.netfilter.org/attachment.cgi?id=364)
[details]> This is cctypeinfo, for the kernel.
> 
> Please build and run this module. It's cctypeinfo, just tweaked a
little for
> kernelspace rather than userspace.
> Note that upon insmod, it will always return -EIO, which is intentional.
The
> result is printed to dmesg nevertheless, so check there after insmod.
> 
Hello Jan. 

Sorry for misunderstanding, but I cannot to use this attachment by following
causes:

1) 
You have the following lines:
MODULES_DIR := /lib/modules/$(shell uname -r)
KERNEL_DIR  := ${MODULES_DIR}/build

But on the our system, to reduce disk space, we are using the following
directory tree:

[root at Router7:~]# ls -la /lib/modules/2.6.27.53-rtr7/
kernel/              modules.ieee1394map  modules.seriomap
modules.alias        modules.inputmap     modules.symbols
modules.ccwmap       modules.isapnpmap    modules.usbmap
modules.dep          modules.ofmap
modules.dep.bb       modules.pcimap
[root at Router7:~]# ls -la /lib/modules/2.6.27.53-rtr7/kernel/
add/                 dummy.ko             ppp_generic.ko
aead.ko              i2c-algo-pca.ko      ppp_synctty.ko
af_key.ko            i2c-pca-platform.ko  slhc.ko
at91_ether.ko        net/                 xfrm_ipcomp.ko
authenc.ko           ppp_async.ko         xfrm_user.ko
crc-ccitt.ko         ppp_deflate.ko

This is done because all flash space is about 7 Mb and was excluded all
unneeded directories.

2) I cannot compile or make any sources directly on the device, because we
don't have gcc or make utility. All sources we are compiling on the
toolchain
and in the device use only binary.


I have no idea, how to rewrite our sources to show needed output.

If I can help you in another way, don't hesitate to contact me.

Thank you in advance, Evgheni.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Aug-27 18:02 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734





--- Comment #10 from Jan Engelhardt <jengelh at medozas.de>  2011-08-27
20:02:32 ---
It does not strictly need to be a module. You can copy kcctypeinfo.c to your
kernel source (e.g. kernel/) and build it there by adding to ./kernel/Makefile:

  obj-m += kcctypeinfo.o

(or obj-y if static). Does not really matter how you pull it off, just get it
compiled ;-)


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Aug-27 18:23 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734





--- Comment #11 from Evgheni <aidjek at gmail.com>  2011-08-27 20:23:22
---
(In reply to comment #10)> It does not strictly need to be a module. You can copy kcctypeinfo.c to
your
> kernel source (e.g. kernel/) and build it there by adding to
./kernel/Makefile:
> 
>   obj-m += kcctypeinfo.o
> 
> (or obj-y if static). Does not really matter how you pull it off, just get
it
> compiled ;-)
> 
Hello Jan.

Thank you for good advice. 

I have an problem during compile:
t405VM:/mnt/Router7/user/projects/router_7/linux/linux-2.6.27.53-add#  make -C
$(pwd) M=kernel modules
make: Entering directory
`/mnt/Router7/user/projects/router_7/linux/linux-2.6.27.53-add'
  CC [M]  kernel/kcctypeinfo.o
kernel/kcctypeinfo.c:6:26: error: linux/printk.h: No such file or directory
make[1]: *** [kernel/kcctypeinfo.o] Error 1
make: *** [_module_kernel] Error 2

and fixed it by this way: 
ln -s
/mnt/Router7/user/projects/router_7/linux/linux-2.6.27.53-add/include/config/printk.h
/mnt/Router7/user/projects/router_7/linux/linux-2.6.27.53-add/include/linux/printk.h

and for now output in dmesg of insmod kcctypeinfo.ko - is represanted below:


[1330302.914062]           TYPE   SIZEOF  ALIGNOF
[1330302.937500]           char        1        1
[1330302.945312]          short        2        2
[1330302.960937]            int        4        4
[1330302.976562]           long        4        4
[1330302.992187]      long long        8        8
[1330303.000000]          float        4        4
[1330303.015625]         double        8        8
[1330303.031250]    long double        8        8
[1330303.039062]         void *        4        4
[1330303.054687] void (*)(void)        4        4
[1330303.070312]      uintptr_t        4        4
[1330303.085937]         size_t        4        4
[1330303.093750]        wchar_t        2        2
[1330303.109375]          off_t        4        4
[1330303.125000]         loff_t        8        8
[1330303.132812]        uint8_t        1        1
[1330303.148437]       uint16_t        2        2
[1330303.164062]       uint32_t        4        4
[1330303.179687]       uint64_t        8        8
[1330303.187500]     struct x16        4        2
[1330303.203125]     struct x32        8        4
[1330303.218750]     struct x64       16        8
[1330303.226562]         mode_t        2        2
[1330303.242187]         time_t        4        4
[1330303.257812] struct timespec        8        4
[1330303.273437] struct sockaddr       16        2
[1330303.281250] struct sockaddr_in       16        4
[1330303.296875] struct sockaddr_in6       28        4
[1330303.312500] struct sockaddr_storage      128        4

Please don't hesitate if you need a further assistance.

WBR, Evgheni.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Aug-27 19:14 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734


Jan Engelhardt <jengelh at medozas.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID




--- Comment #12 from Jan Engelhardt <jengelh at medozas.de>  2011-08-27
21:14:35 ---
You are mixing two ABIs, which is not supported on ARM because there is no
CONFIG_COMPAT. If your kernel is EABI, userspace should be as well.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Aug-27 19:21 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734





--- Comment #13 from Evgheni <aidjek at gmail.com>  2011-08-27 21:21:52
---
(In reply to comment #12)> You are mixing two ABIs, which is not supported on ARM because there is no
> CONFIG_COMPAT. If your kernel is EABI, userspace should be as well.
> 
Hello Jan

I have found that all modules in kernel and iptables binary were compiled with
EABI:
t405VM:/home/aidjek/iptables-1.4.12/build/bin/sbin# readelf -h iptables | grep
Flags 
  Flags:                             0x202, has entry point, GNU EABI, software
FP

readelf -h /home/aidjek/iptables-1.4.3.2/build/bin/sbin/iptables | grep Flags 
  Flags:                             0x202, has entry point, GNU EABI, software
FP

readelf -h net/ipv4/netfilter/ip_tables.ko | grep Flag
  Flags:                             0x200, GNU EABI, software FP

readelf -h net/ipv4/netfilter/ip_tables.ko | grep Flag
  Flags:                             0x200, GNU EABI, software FP

Also in kernel configure - I have following records:
CONFIG_AEABI=y
CONFIG_OABI_COMPAT=y

Anything else related with EABI in menuconfig of kernel I have not found.

Would be grateful if you can point anything more about EABI on arm, I used this
link http://wiki.debian.org/ArmEabiPort , but nothing related with my issue
didn't find. 

Thank you in advance, Evgheni.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Aug-27 19:35 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734





--- Comment #14 from Jan Engelhardt <jengelh at medozas.de>  2011-08-27
21:35:05 ---
You can see that the alignment for uint64_t differes between userspace
(cctypeinfo output in comment #2) and kernelspace (kcctypeinfo output in
comment #11). According to the very Debian page you linked to, this is one of
the cornerstone differences between two different ABIs.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Aug-27 19:38 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734





--- Comment #15 from Evgheni <aidjek at gmail.com>  2011-08-27 21:38:53
---
(In reply to comment #14)> You can see that the alignment for uint64_t differes between userspace
> (cctypeinfo output in comment #2) and kernelspace (kcctypeinfo output in
> comment #11). According to the very Debian page you linked to, this is one
of
> the cornerstone differences between two different ABIs.
> 
Thank you Jan for your help.

Our team will look at this difference after our holiday, during next 2 weeks.
We will report you about results.

WBR, Evgheni.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Sep-01 21:31 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734





--- Comment #16 from Tom <xsited at yahoo.com>  2011-09-01 23:31:25 ---
(In reply to comment #14)> You can see that the alignment for uint64_t differes between userspace
> (cctypeinfo output in comment #2) and kernelspace (kcctypeinfo output in
> comment #11). According to the very Debian page you linked to, this is one
of
> the cornerstone differences between two different ABIs.
> 
I wanted to confirm that in my case the EABI where out of sync and when the
kernel and userspace where in sync then my issues was resolved.  Thanks for the
help.


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Nov-14 07:08 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734


Evgheni <aidjek at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|INVALID                     |FIXED




--- Comment #17 from Evgheni <aidjek at gmail.com>  2011-11-14 08:08:12
---
Hello Jan Engelhardt

You are right in your proroposition about difference in kerlen and user spaces. 

We have rebuild toolchain from beginning using this manual
http://cross-lfs.org/view/clfs-embedded/arm/index.html and build iptables
version 1.4.12.1. All works fine without any issues. 

This issue is fully resolved. 


-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

bugzilla-daemon at bugzilla.netfilter.org

2011-Nov-14 07:08 UTC

head link

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

http://bugzilla.netfilter.org/show_bug.cgi?id=734


Evgheni <aidjek at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED




-- 
Configure bugmail: http://bugzilla.netfilter.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are watching all bug changes.

Reasonably Related Threads

Search for more apparently analagous threads

netfilter buglog - Aug 2011 - [Bug 734] New: Iptables on Arm Processor with Vanilla Kernel

[Bug 734] New: Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

[Bug 734] Iptables on Arm Processor with Vanilla Kernel

Reasonably Related Threads