Re: crash on solaris9/sparc with 4.1.31

Darren Reed <[email protected]>
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <15614_1229264769_49451780_15614_18955_1_49451649.9030807@reed.wattle.id.au>
Joseph Tam wrote:
..
> gcc -fno-hosted
>
>     Shouldn't the default gcc flags have "-fno-hosted" for both
>     pfil and ipf to avoid these error message when loading the
>     kernel modules:
>
>         unix: WARNING: mod_load: cannot load module 'pfil'
>         unix: /kernel/drv/sparcv9/pfil: undefined symbol
>         unix:  'memset'

Actually, I think the problem is the missing -ffreestanding.


> Missing /usr/xpg4/bin/grep
>
>     I don't have the XPG4 version of grep so some of the boot
>     and packaging scripts reports errors.  It's only used to
>     test the eixstence of strings in a file, so how about
>     replacing
>
>         /usr/xpg4/bin/grep -q ...
>
>     with
>
>         grep >/dev/null ...
>
>     This works for GNU grep, /usr/bin/grep and /usr/xpg4/bin/grep.

So in that case the actual statement needs to look like this:
MIOCPULLUP:sh=/usr/ccs/bin/nm -p /dev/ksyms|grep miocpullup >/dev/null
2>&1; if ...

Does that work for you?


> arc4random.c
> ...
>    It looks like some bug in the system header rather than ipfilter
>     (or perhaps I'm using the wrong OS specific gcc).  Whatever the
>     reason, since it doesn't seem to be required, can't this include
>     statemen just be removed?

I've got a funny feeling that it is needed, somewhere else...
It feels like I should upload a 4.1.32-RC0.

> Kernel crash?
>
>     When should IPF be recompiled?  Every time "uname -v" changes, or
>     perhaps only when the major patch# changes?

To be safe, every time "uname -v" changes.

To diagnose crashes on Solaris 8 and 9, download this package:
http://coombs.anu.edu.au/~avalon/CTEact-8.5.17.tar.gz
http://coombs.anu.edu.au/~avalon/CTEactx-8.5.17.tar.gz

.. install that and email me the act.# file from /var/crash/foo.

Darren
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.