Displaying 17 results from an estimated 17 matches for "ipproto_raw".
2016 Jan 27
2
ctdb, raw sockets and CVE-2015-8543
...o open raw socket (Invalid argument)
| Could not find which interface the ip address is hosted on. can not release it
and
| common/system_linux.c:344 failed to open raw socket (Invalid argument)
The corresponding parts in ctdb's code look like this:
| s = socket(AF_INET, SOCK_RAW, htons(IPPROTO_RAW));
converting IPPROTO_RAW to 0xff00 (from strace):
| socket(PF_INET, SOCK_RAW, 0xff00 /* IPPROTO_??? */) = -1 EINVAL (Invalid argument)
Removing htons() from both calls seems to fix the issue for us. Is it
possible that the call to htons is just wrong and should be removed?
-- Adi
[1] https://...
2016 Jan 29
0
ctdb, raw sockets and CVE-2015-8543
...nt)
> | Could not find which interface the ip address is hosted on. can not
> release it
> and
> | common/system_linux.c:344 failed to open raw socket (Invalid argument)
>
> The corresponding parts in ctdb's code look like this:
> | s = socket(AF_INET, SOCK_RAW, htons(IPPROTO_RAW));
> converting IPPROTO_RAW to 0xff00 (from strace):
> | socket(PF_INET, SOCK_RAW, 0xff00 /* IPPROTO_??? */) = -1 EINVAL
> (Invalid argument)
>
> Removing htons() from both calls seems to fix the issue for us. Is it
> possible that the call to htons is just wrong and should be r...
2011 Aug 03
18
[Bug 734] New: Iptables on Arm Processor with Vanilla Kernel
...4096, PROT_READ) = 0
mprotect(0x400ae000, 4096, PROT_READ) = 0
mprotect(0x40010000, 4096, PROT_READ) = 0
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) =
0
ioctl(1, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) =
0
socket(PF_INET, SOCK_RAW, IPPROTO_RAW) = 3
getsockopt(3, SOL_IP, 0x40 /* IP_??? */,
"filter\0\306\2701(\300\24\0\0\0\377\7\0\0\340\334\326\306\200\0C\307$\335\326\306\16"...,
[84]) = 0
brk(0) = 0x1b000
brk(0x1c000) = 0x1c000
getsockopt(3, SOL_IP, 0x41 /* IP_??? */,...
2007 Feb 08
0
[Bug 541] New: bad error mesage when run as not root
...070208.log Permission denied
iptables v1.3.6: can't initialize iptables table `filter': Permission denied
(you must be root)
Perhaps iptables or your kernel needs to be upgraded.
A simple "you must be root" would probably be better.
Strace shows:
23208 socket(PF_INET, SOCK_RAW, IPPROTO_RAW) = -1 EPERM (Operation not permitted)
23208 open("/proc/sys/kernel/modprobe", O_RDONLY) = 3
So maybe the EPERM should check the euid and bail out if it is not root. Or the
check could even be done earlier explicitly.
--
Configure bugmail: https://bugzilla.netfilter.org/bugzilla/userpr...
2011 May 12
1
[Bug 717] New: ip6tables: Unknown error 18446744073709551615
...PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0x7fc717376000
mprotect(0x7fc717377000, 2093056, PROT_NONE) = 0
mmap(0x7fc717576000, 4096, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0) = 0x7fc717576000
close(3) = 0
socket(PF_INET6, SOCK_RAW, IPPROTO_RAW) = 3
getsockopt(3, SOL_IPV6, 0x40 /* IPV6_??? */,
"filter\0\377\0\0\0\0\0\0\0\0\222\0\0\0\0\0\0\0008\230^\27\0\210\377\377"...,
[84]) = 0
getsockopt(3, SOL_IPV6, 0x41 /* IPV6_??? */,
"filter\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., [8384]) = 0
setsockopt(3, SOL_I...
2006 Apr 14
8
[Bug 467] iptables is complaining with bogus unknown error 18446744073709551615
https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=467
------- Additional Comments From mvolaski@aecom.yu.edu 2006-04-14 01:35 MET -------
Examples of rules that give the error are
1) iptables -A INPUT -i bond0 -s 129.98.90.0/24 -p tcp --dport 548 -j ACCEPT
2) iptables -A INPUT -i bond0 -s 129.98.90.101/32 -p tcp --dport 497 -j ACCEPT
3) iptables -A INPUT -i bond0 -s 129.98.90.227/32
2016 Feb 09
0
[Announce] Samba 4.4.0rc2 Available for Download
...6: ctdb: Do not provide a useless pkgconfig file for ctdb.
o Stefan Metzmacher <metze at samba.org>
* BUG 11699: Crypto.Cipher.ARC4 is not available on some platforms, fallback
to M2Crypto.RC4.RC4 then.
o Amitay Isaacs <amitay at gmail.com>
* BUG 11705: Sockets with htons(IPPROTO_RAW) and CVE-2015-8543.
o Andreas Schneider <asn at samba.org>
* BUG 11690: docs: Add smbspool_krb5_wrapper manpage.
o Uri Simchoni <uri at samba.org>
* BUG 11681: smbd: Show correct disk size for different quota and dfree block
sizes.
######################################...
2016 Feb 09
0
[Announce] Samba 4.4.0rc2 Available for Download
...6: ctdb: Do not provide a useless pkgconfig file for ctdb.
o Stefan Metzmacher <metze at samba.org>
* BUG 11699: Crypto.Cipher.ARC4 is not available on some platforms, fallback
to M2Crypto.RC4.RC4 then.
o Amitay Isaacs <amitay at gmail.com>
* BUG 11705: Sockets with htons(IPPROTO_RAW) and CVE-2015-8543.
o Andreas Schneider <asn at samba.org>
* BUG 11690: docs: Add smbspool_krb5_wrapper manpage.
o Uri Simchoni <uri at samba.org>
* BUG 11681: smbd: Show correct disk size for different quota and dfree block
sizes.
######################################...
2016 Feb 23
0
[Announce] Samba 4.4.0rc3 Available for Download
...6: ctdb: Do not provide a useless pkgconfig file for ctdb.
o Stefan Metzmacher <metze at samba.org>
* BUG 11699: Crypto.Cipher.ARC4 is not available on some platforms, fallback
to M2Crypto.RC4.RC4 then.
o Amitay Isaacs <amitay at gmail.com>
* BUG 11705: Sockets with htons(IPPROTO_RAW) and CVE-2015-8543.
o Andreas Schneider <asn at samba.org>
* BUG 11690: docs: Add smbspool_krb5_wrapper manpage.
o Uri Simchoni <uri at samba.org>
* BUG 11681: smbd: Show correct disk size for different quota and dfree block
sizes.
######################################...
2016 Feb 23
0
[Announce] Samba 4.4.0rc3 Available for Download
...6: ctdb: Do not provide a useless pkgconfig file for ctdb.
o Stefan Metzmacher <metze at samba.org>
* BUG 11699: Crypto.Cipher.ARC4 is not available on some platforms, fallback
to M2Crypto.RC4.RC4 then.
o Amitay Isaacs <amitay at gmail.com>
* BUG 11705: Sockets with htons(IPPROTO_RAW) and CVE-2015-8543.
o Andreas Schneider <asn at samba.org>
* BUG 11690: docs: Add smbspool_krb5_wrapper manpage.
o Uri Simchoni <uri at samba.org>
* BUG 11681: smbd: Show correct disk size for different quota and dfree block
sizes.
######################################...
2016 Mar 16
4
[Announce] Samba 4.4.0rc5 Available for Download
...6: ctdb: Do not provide a useless pkgconfig file for ctdb.
o Stefan Metzmacher <metze at samba.org>
* BUG 11699: Crypto.Cipher.ARC4 is not available on some platforms, fallback
to M2Crypto.RC4.RC4 then.
o Amitay Isaacs <amitay at gmail.com>
* BUG 11705: Sockets with htons(IPPROTO_RAW) and CVE-2015-8543.
o Andreas Schneider <asn at samba.org>
* BUG 11690: docs: Add smbspool_krb5_wrapper manpage.
o Uri Simchoni <uri at samba.org>
* BUG 11681: smbd: Show correct disk size for different quota and dfree block
sizes.
######################################...
2016 Mar 16
4
[Announce] Samba 4.4.0rc5 Available for Download
...6: ctdb: Do not provide a useless pkgconfig file for ctdb.
o Stefan Metzmacher <metze at samba.org>
* BUG 11699: Crypto.Cipher.ARC4 is not available on some platforms, fallback
to M2Crypto.RC4.RC4 then.
o Amitay Isaacs <amitay at gmail.com>
* BUG 11705: Sockets with htons(IPPROTO_RAW) and CVE-2015-8543.
o Andreas Schneider <asn at samba.org>
* BUG 11690: docs: Add smbspool_krb5_wrapper manpage.
o Uri Simchoni <uri at samba.org>
* BUG 11681: smbd: Show correct disk size for different quota and dfree block
sizes.
######################################...
1997 Nov 14
0
Linux IP fragment overlap bug (fwd)
...ort, u_short);
int main(int argc, char **argv)
{
int one = 1, count = 0, i, rip_sock;
u_long src_ip = 0, dst_ip = 0;
u_short src_prt = 0, dst_prt = 0;
struct in_addr addr;
fprintf(stderr, "teardrop route|daemon9\n\n");
if((rip_sock = socket(AF_INET, SOCK_RAW, IPPROTO_RAW)) < 0)
{
perror("raw socket");
exit(1);
}
if (setsockopt(rip_sock, IPPROTO_IP, IP_HDRINCL, (char *)&one, sizeof(one))
< 0)
{
perror("IP_HDRINCL");
exit(1);
}
if (argc < 3) usage(argv[0]);
if (!(src_...
1999 Mar 25
0
(Fwd) DoS for Linux 2.1.89 - 2.2.3: 0 length fragment bug
...case 'n': count=atoi(optarg);
break;
case 'u': delay=atoi(optarg);
break;
default: usage();
}
}
argc-=optind;
argv+=optind;
source=resolve(argv[0]);
dest=resolve(argv[1]);
srandom(time((time_t)0)*getpid());
if( (sock = socket(AF_INET, SOCK_RAW, IPPROTO_RAW)) < 0)
{
perror("socket");
exit(1);
}
if (setsockopt(sock,IPPROTO_IP,IP_HDRINCL,(char *)&on,sizeof(on)) < 0)
{
perror("setsockopt: IP_HDRINCL");
exit(1);
}
fprintf(stdout,"\nStarting attack on %s ...",argv[1]);
for (i=0; i<count; i++)
{...
2016 Mar 16
0
[Announce] Samba 4.4.0rc5 Available for Download
...gconfig file for ctdb.
>
> o Stefan Metzmacher <metze at samba.org>
> * BUG 11699: Crypto.Cipher.ARC4 is not available on some platforms, fallback
> to M2Crypto.RC4.RC4 then.
>
> o Amitay Isaacs <amitay at gmail.com>
> * BUG 11705: Sockets with htons(IPPROTO_RAW) and CVE-2015-8543.
>
> o Andreas Schneider <asn at samba.org>
> * BUG 11690: docs: Add smbspool_krb5_wrapper manpage.
>
> o Uri Simchoni <uri at samba.org>
> * BUG 11681: smbd: Show correct disk size for different quota and dfree block
> sizes.
>...
2016 Mar 22
0
[Announce] Samba 4.4.0 Available for Download
...6: ctdb: Do not provide a useless pkgconfig file for ctdb.
o Stefan Metzmacher <metze at samba.org>
* BUG 11699: Crypto.Cipher.ARC4 is not available on some platforms, fallback
to M2Crypto.RC4.RC4 then.
o Amitay Isaacs <amitay at gmail.com>
* BUG 11705: Sockets with htons(IPPROTO_RAW) and CVE-2015-8543.
o Andreas Schneider <asn at samba.org>
* BUG 11690: docs: Add smbspool_krb5_wrapper manpage.
o Uri Simchoni <uri at samba.org>
* BUG 11681: smbd: Show correct disk size for different quota and dfree block
sizes.
######################################...
2016 Mar 22
0
[Announce] Samba 4.4.0 Available for Download
...6: ctdb: Do not provide a useless pkgconfig file for ctdb.
o Stefan Metzmacher <metze at samba.org>
* BUG 11699: Crypto.Cipher.ARC4 is not available on some platforms, fallback
to M2Crypto.RC4.RC4 then.
o Amitay Isaacs <amitay at gmail.com>
* BUG 11705: Sockets with htons(IPPROTO_RAW) and CVE-2015-8543.
o Andreas Schneider <asn at samba.org>
* BUG 11690: docs: Add smbspool_krb5_wrapper manpage.
o Uri Simchoni <uri at samba.org>
* BUG 11681: smbd: Show correct disk size for different quota and dfree block
sizes.
######################################...