From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-0.0 required=3.0 tests=DKIM_INVALID,DKIM_SIGNED, FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,FREEMAIL_REPLYTO_END_DIGIT, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_NONE,SPF_PASS, URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 9BEB4C43603 for ; Wed, 11 Dec 2019 19:14:12 +0000 (UTC) Received: from krantz.zx2c4.com (krantz.zx2c4.com [192.95.5.69]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPS id B10DB206A5 for ; Wed, 11 Dec 2019 19:14:11 +0000 (UTC) Authentication-Results: mail.kernel.org; dkim=fail reason="signature verification failed" (1024-bit key) header.d=protonmail.ch header.i=@protonmail.ch header.b="VgPBHEWa" DMARC-Filter: OpenDMARC Filter v1.3.2 mail.kernel.org B10DB206A5 Authentication-Results: mail.kernel.org; dmarc=fail (p=quarantine dis=none) header.from=protonmail.ch Authentication-Results: mail.kernel.org; spf=pass smtp.mailfrom=wireguard-bounces@lists.zx2c4.com Received: from krantz.zx2c4.com (localhost [IPv6:::1]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 0f5ebb87; Wed, 11 Dec 2019 19:13:44 +0000 (UTC) Received: from krantz.zx2c4.com (localhost [127.0.0.1]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 01011a99 for ; Wed, 11 Dec 2019 19:13:42 +0000 (UTC) Received: from mail-40137.protonmail.ch (mail-40137.protonmail.ch [185.70.40.137]) by krantz.zx2c4.com (ZX2C4 Mail Server) with ESMTP id 910f4236 for ; Wed, 11 Dec 2019 19:13:41 +0000 (UTC) Date: Wed, 11 Dec 2019 19:13:37 +0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.ch; s=default; t=1576091620; bh=3KpWwiMUMI4IWy99FSNy/TypdObyAtata8DpF+s2yZQ=; h=Date:To:From:Cc:Reply-To:Subject:In-Reply-To:References: Feedback-ID:From; b=VgPBHEWaEjis8NQSmxdp78vbUNjLv+u2E8I+AeSm7Ly5dEBPr7wS4PVaJxKMuUPq+ seHLPu3rxhlEdZR4S0b7E4rbUuSxB4Lkoa9ZMht0fJdqFa6Eq11q7L8r3NHt16SkoF w4JpcTR8vqRwgiga0tXAudwdN/C7/9iSw2jhvBas= To: "Jason A. Donenfeld" From: Jordan Glover Subject: Re: [ANNOUNCE] WireGuard Snapshot `0.0.20191205` Available Message-ID: In-Reply-To: References: Feedback-ID: QEdvdaLhFJaqnofhWA-dldGwsuoeDdDw7vz0UPs8r8sanA3bIt8zJdf4aDqYKSy4gJuZ0WvFYJtvq21y6ge_uQ==:Ext:ProtonMail MIME-Version: 1.0 Cc: WireGuard mailing list X-BeenThere: wireguard@lists.zx2c4.com X-Mailman-Version: 2.1.15 Precedence: list Reply-To: Jordan Glover List-Id: Development discussion of WireGuard List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: wireguard-bounces@lists.zx2c4.com Sender: "WireGuard" On Friday, December 6, 2019 5:35 PM, Jason A. Donenfeld wrote: > Looks like an arch problem or a libnftnl problem. I've made a minimal > reproducer: > > printf 'filter\nCOMMIT\nraw\nCOMMIT\n*mangle\nCOMMIT\n' | sudo > iptables-nft-restore -n > > I filed a bug report on Arch: https://bugs.archlinux.org/task/64755 > You can follow up with them. I tried to compile myself iptables 1.8.4 which is latest upstream version and have good and bad news: The good one is your minimal reproducer no longer causes segfault. The bad one is wg-quick still does: wg-quick[2325]: [#] iptables-restore -n audit[2326]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2326 comm="iptables-restor" exe="/usr/bin/xtables-nft-multi" sig=11 res=1 wg-quick[2325]: /usr/bin/wg-quick: line 29: 2326 Segmentation fault (core dumped) "$@" kernel: show_signal_msg: 40 callbacks suppressed kernel: iptables-restor[2326]: segfault at 0 ip 000069bb4df13cc9 sp 0000716fcc5b9b30 error 4 in libnftnl.so.11.2.0[69bb4df11000+18000] kernel: Code: 15 5c 20 02 00 48 85 c0 74 07 48 89 00 48 89 40 08 48 83 c4 08 c3 66 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 fd 53 48 83 ec 08 <48> 8b 3f 48 8b 1f 48 39 fd 74 2f 0f 1f 40 00 48 8b 47 08 48 89 43 Maybe upstream found and fixed some regression but still missed the other one. Jordan _______________________________________________ WireGuard mailing list WireGuard@lists.zx2c4.com https://lists.zx2c4.com/mailman/listinfo/wireguard