It has been fixed in mainline kernel also. https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b9fed748185a96b7cfe74afac4bd228e8af16f01
Regards, Neutron Soutmun On Sun, Dec 22, 2013 at 8:38 AM, Neutron Soutmun <neo.neut...@gmail.com> wrote: > Hello, > > This issue has been fixed upstream (ipset kernel part), see [1], which > is not included in the 3.2 kernel of Wheezy. > > I'll ask the Debian Kernel Team how to properly fix this issue. > > [1] Check and reject crazy /0 input parameters - > http://git.netfilter.org/ipset/commit/kernel/net/netfilter/ipse/ip_set_bitmap_ip.c?id=a1cbbc8f86a8ef955708d48f20f8ca021a0a7641 > > On Fri, Dec 20, 2013 at 6:45 PM, Mi <mi.li...@alma.ch> wrote: >> Package: ipset >> Version: 6.12.1-1 >> Severity: important >> >> >> # ipset create ipv4_ch bitmap:ip range 0.0.0.0/0 >> # ipset list >> [ another previously defined hash:net set. No problem with that. ] >> >> Name: ipv4_ch >> Type: bitmap:ip >> Header: range 0.0.0.0-255.255.255.255 >> Size in memory: 120 >> References: 0 >> Members: >> >> # ipset add ipv4_ch 5.1.96.0/21 >> >> Message from syslogd@pe1 at Dec 20 12:14:53 ... >> kernel:[3088568.395819] Oops: 0002 [#1] SMP >> >> Message from syslogd@pe1 at Dec 20 12:14:53 ... >> kernel:[3088568.398495] Stack: >> >> Message from syslogd@pe1 at Dec 20 12:14:53 ... >> kernel:[3088568.398495] Call Trace: >> >> Message from syslogd@pe1 at Dec 20 12:14:53 ... >> kernel:[3088568.398495] Code: 31 c0 48 85 ff 74 19 48 81 ff ff ff ff 7f b0 >> 01 74 0e 48 8b 05 e7 af 1e e1 48 29 f8 48 c1 e8 3f c3 48 8b 47 40 0f b7 16 >> 48 8b 00 <f0> 0f ab 10 19 d2 83 fa 01 19 c0 f7 d0 25 f9 ef ff ff c3 48 8b >> >> Message from syslogd@pe1 at Dec 20 12:14:53 ... >> kernel:[3088568.398495] CR2: 0000000000000c10 >> >> Message from syslogd@pe1 at Dec 20 12:14:53 ... >> kernel:[3088568.428341] Kernel panic - not syncing: Fatal exception in >> interrupt >> >> >> That's all. The machine hung completely and needed a hard reset. >> >> >> >> -- System Information: >> Debian Release: 7.3 >> APT prefers stable-updates >> APT policy: (500, 'stable-updates'), (500, 'stable') >> Architecture: amd64 (x86_64) >> Foreign Architectures: i386 >> >> Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores) >> Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) >> Shell: /bin/sh linked to /bin/dash >> >> Versions of packages ipset depends on: >> ii iptables 1.4.14-3.1 >> ii libc6 2.13-38 >> ii libipset2 6.12.1-1 >> >> ipset recommends no packages. >> >> ipset suggests no packages. >> >> -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org