Re: Minor patch to compile IPFilter 5.0.6 under Solaris 10u6

Darren Reed <[email protected]>
Newsgroups gmane.comp.security.firewalls.ipfilter
Message-ID <19287_1238871642_49D7AE59_19287_12030_1_49D7ADE9.3080409@reed.wattle.id.au>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
 
hi Jim,

It appears your email did get blocked...

I haven't yet tried opensolaris with ipfilter 5 or 4.1.32rc#...

I suppose I should give it a go and see what happens :)

If you encounter any more problems, please visit the sourceforge
page for reporting bugs and fill it in:
http://sourceforge.net/tracker/?func=add&group_id=169098&atid=849053
I've added this one here:
http://sourceforge.net/tracker/?func=detail&aid=2731855&group_id=169098&atid=849053

Cheers,
Darren

Jim Klimov wrote:
| Hello Darren,
|
| ======
|   This is a copy of my letter to the list just in case it
| doesn't pass for some reason.
| ======
|
|   Last week I complained about problems compiling recent
| IPFilter under recent OpenSolaris. It seems that the API
| has changed a lot. Even when I got IPF to compile after
| a few nights of messing with IPF and system header files,
| it didn't run and panicked the kernel.
| (NB: it seems my letter didn't pass through, although it
| was accepted by the list's relay a week ago).
|
|   So I reinstalled our firewall-to-be with Solaris 10u6
| (x86) and built IPF-5.0.6. I found a few now-familiar
| problems which I fixed with the patch below:
|
| diff -Naur ip_fil5.0.6/arc4random.c ip_fil5.0.6-ok-sol10u6/arc4random.c
| --- ip_fil5.0.6/arc4random.c    2009-03-10 07:22:52.000000000 +0300
| +++ ip_fil5.0.6-ok-sol10u6/arc4random.c 2009-04-03 06:55:21.896564914 
+0400
| @@ -1,4 +1,3 @@
| -#ifdef NEED_LOCAL_RAND
|  /*-
|   * THE BEER-WARE LICENSE
|   *
| @@ -39,6 +38,7 @@
|  # include "md5.h"
|  #endif
|
| +#ifdef NEED_LOCAL_RAND
|  #if !defined(__GNUC__)
|  # define __inline
|  #endif
| @@ -47,6 +47,8 @@
|  #define        ARC4_RESEED_SECONDS 300
|  #define        ARC4_KEYBYTES (256 / 8)
|
|
| +typedef uint8_t         u_int8_t;
| +
|  static u_int8_t arc4_i, arc4_j;
|  static int arc4_numruns = 0;
|  static u_int8_t arc4_sbox[256];
| diff -Naur ip_fil5.0.6/ip_auth.c ip_fil5.0.6-ok-sol10u6/ip_auth.c
| --- ip_fil5.0.6/ip_auth.c       2009-03-10 07:22:52.000000000 +0300
| +++ ip_fil5.0.6-ok-sol10u6/ip_auth.c    2009-04-03 06:48:37.104965915 
+0400
| @@ -19,7 +19,9 @@
|  #if !defined(_KERNEL)
|  # include <stdio.h>
|  # include <stdlib.h>
| -# include <stdbool.h>
| +# ifdef _STDC_C99
| +#  include <stdbool.h>
| +# endif
|  # include <string.h>
|  # define _KERNEL
|  # ifdef __OpenBSD__
|
|
| Hope this helps anybody,
| //Jim Klimov
|
|

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
 
iEYEARECAAYFAknXrekACgkQP7JIXtvLbFUA2QCgyBo4CpqMxM84AoDmypkzB6T9
q/8AoMif6/n+1NgRWZ8RopStnfLhR4Fe
=KK6Q
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.