[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#904385: marked as done (arm64: sigaltstack fails with MINSIGSTKSZ for 32-bit processes)



Your message dated Mon, 26 Aug 2019 17:47:31 +0000
with message-id <E1i2J5X-0009ZE-CX@fasolo.debian.org>
and subject line Bug#904385: fixed in linux 4.9.189-1
has caused the Debian Bug report #904385,
regarding arm64: sigaltstack fails with MINSIGSTKSZ for 32-bit processes
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
904385: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904385
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: src:linux
Version: 4.9.110-1
Severity: normal

Dear Maintainer,

The arm64 kernel allows one to run aarch32 processes on an aarch64
processor (if it has support for it), using the standard 32/64-bit
syscall compatibility. However this compat layer does not correctly
validate the arguments of the sigaltstack syscall.

arch/arm64/include/uapi/asm/signal.h defines SIGSTKSZ and MINSIGSTKSZ
as follow:
| #define MINSIGSTKSZ 5120
| #define SIGSTKSZ    16384

arch/arm/include/uapi/asm/signal.h defines SIGSTKSZ and MINSIGSTKSZ as
follow:
| #define MINSIGSTKSZ 2048
| #define SIGSTKSZ    8192

It seems to be the only 32/64-bit architecture for which those constants
differ. The do_compat_sigaltstack function in kernel/signal.c passes
ss.ss_size to do_sigaltstack unchanged, and the latter validates it
against the native MINSIGSTKSZ.

This causes the glibc test nptl/tst-signal6 to fail, but I guess it can
also affects other packages at runtime. This is also reproducible with
the following simple testcase:

| #include <signal.h>
| #include <stdlib.h>
| #include <stdio.h>
| 
| int main(int argc, char *argv[])
| {
|         stack_t ss;
| 
|         ss.ss_sp = malloc(MINSIGSTKSZ);
|         if (ss.ss_sp == NULL) {
|                 perror("malloc");
|                 exit(EXIT_FAILURE);
|         }
| 
|         ss.ss_size = MINSIGSTKSZ;
|         ss.ss_flags = 0;
|         if (sigaltstack(&ss, NULL)) {
|                 perror("sigaltstack");
|                 exit(EXIT_FAILURE);
|         }
| 
|         return 0;
| }

| $ ./sigaltstack 
| sigaltstack: Cannot allocate memory

| $ strace ./sigaltstack
| execve("./sigaltstack", ["./sigaltstack"], [/* 23 vars */]) = 0
| strace: [ Process PID=694 runs in 32 bit mode. ]
| uname({sysname="Linux", nodename="arm64", ...}) = 0
| brk(NULL)                               = 0x35d000
| brk(0x35dd00)                           = 0x35dd00
| set_tls(0x35d4c0, 0x78f7c, 0, 0x24, 0x78f6c) = 0
| readlink("/proc/self/exe", "/home/aurel32/sigaltstack", 4096) = 25
| brk(0x37ed00)                           = 0x37ed00
| brk(0x37f000)                           = 0x37f000
| access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
| sigaltstack({ss_sp=0x35e8b0, ss_flags=0x800 /* SS_??? */, ss_size=67191}, NULL) = -1 ENOMEM (Cannot allocate memory)
| dup(2)                                  = 3
| fcntl64(3, F_GETFL)                     = 0x20002 (flags O_RDWR|0x20000)
| fstat64(3, 0xff96bf28)                  = 0
| write(3, "sigaltstack: Cannot allocate mem"..., 36sigaltstack: Cannot allocate memory
| ) = 36
| close(3)                                = 0
| exit_group(1)                           = ?
| +++ exited with 1 +++

-- System Information:
Debian Release: 9.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: arm64 (aarch64)

Kernel: Linux 4.9.0-7-arm64 (SMP w/2 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8), LANGUAGE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

--- End Message ---
--- Begin Message ---
Source: linux
Source-Version: 4.9.189-1

We believe that the bug you reported is fixed in the latest version of
linux, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 904385@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ben Hutchings <ben@decadent.org.uk> (supplier of updated linux package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 22 Aug 2019 21:50:36 +0100
Binary: linux-doc-4.9 linux-headers-4.9.0-11-common linux-headers-4.9.0-11-common-rt linux-manual-4.9 linux-source-4.9 linux-support-4.9.0-11
Source: linux
Architecture: all source
Version: 4.9.189-1
Distribution: stretch
Urgency: medium
Maintainer: Debian Kernel Team <debian-kernel@lists.debian.org>
Changed-By: Ben Hutchings <ben@decadent.org.uk>
Closes: 904385 935134
Description: 
 linux-doc-4.9 - Linux kernel specific documentation for version 4.9
 linux-headers-4.9.0-11-common - Common header files for Linux 4.9.0-11
 linux-headers-4.9.0-11-common-rt - Common header files for Linux 4.9.0-11-rt
 linux-manual-4.9 - Linux kernel API manual pages for version 4.9
 linux-source-4.9 - Linux kernel source for version 4.9 with Debian patches
 linux-support-4.9.0-11 - Support files for Linux 4.9
Changes:
 linux (4.9.189-1) stretch; urgency=medium
 .
   * New upstream stable update:
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.186
     - [x86] Input: elantech - enable middle button support on 2 ThinkPads
     - mac80211: mesh: fix RCU warning
     - mac80211: free peer keys before vif down in mesh
     - netfilter: ipv6: nf_defrag: fix leakage of unqueued fragments
     - netfilter: ipv6: nf_defrag: accept duplicate fragments again
     - [armhf] Input: imx_keypad - make sure keyboard can always wake up system
     - [arm64] KVM: arm/arm64: vgic: Fix kvm_device leak in vgic_its_destroy
     - mac80211: only warn once on chanctx_conf being NULL
     - md: fix for divide error in status_resync
     - bnx2x: Check if transceiver implements DDM before access
     - ip6_tunnel: allow not to count pkts on tstats by passing dev as NULL
     - net :sunrpc :clnt :Fix xps refcount imbalance on the error path
     - udf: Fix incorrect final NOT_ALLOCATED (hole) extent length
     - [x86] ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()
     - [x86] tls: Fix possible spectre-v1 in do_get_thread_area()
     - fscrypt: don't set policy for a dead directory
     - USB: serial: ftdi_sio: add ID for isodebug v1
     - USB: serial: option: add support for GosunCn ME3630 RNDIS mode
     - Revert "serial: 8250: Don't service RX FIFO if interrupts are disabled"
     - p54usb: Fix race between disconnect and firmware loading
       (CVE-2019-15220)
     - usb: gadget: ether: Fix race between gether_disconnect and rx_submit
     - [i386] staging: comedi: dt282x: fix a null pointer deref on interrupt
     - [x86] staging: comedi: amplc_pci230: fix null pointer deref on interrupt
     - carl9170: fix misuse of device driver API
     - [x86] VMCI: Fix integer overflow in VMCI handle arrays
     - Revert "e1000e: fix cyclic resets at link up with active tx"
     - e1000e: start network tx queue only when link is up
     - [arm64] crypto: remove accidentally backported files
     - perf/core: Fix perf_sample_regs_user() mm check
     - [armhf] omap2: remove incorrect __init annotation
     - be2net: fix link failure after ethtool offline test
     - ppp: mppe: Add softdep to arc4
     - sis900: fix TX completion
     - dm verity: use message limit for data block corruption message
     - [s390x] fix stfle zero padding
     - [s390x] qdio: (re-)initialize tiqdio list entries
     - [s390x] qdio: don't touch the dsci in tiqdio_add_input_queues()
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.187
     - [arm64] efi: Mark __efistub_stext_offset as an absolute symbol explicitly
     - [armhf] dmaengine: imx-sdma: fix use-after-free on probe error path
     - ath10k: Do not send probe response template for mesh
     - ath9k: Check for errors when reading SREV register
     - ath6kl: add some bounds checking
     - ath: DFS JP domain W56 fixed pulse type 3 RADAR detection
     - batman-adv: fix for leaked TVLV handler.
     - media: dvb: usb: fix use after free in dvb_usb_device_exit
     - media: marvell-ccic: fix DMA s/g desc number calculation
     - media: media_device_enum_links32: clean a reserved field
     - [armhf,arm64] net: stmmac: dwmac1000: Clear unused address entries
     - [armhf,arm64] net: stmmac: dwmac4/5: Clear unused address entries
     - signal/pid_namespace: Fix reboot_pid_ns to use send_sig not force_sig
     - af_key: fix leaks in key_pol_get_resp and dump_sp.
     - xfrm: Fix xfrm sel prefix length validation
     - media: mc-device.c: don't memset __user pointer contents
     - net: phy: Check against net_device being NULL
     - tua6100: Avoid build warnings.
     - [armhf] media: wl128x: Fix some error handling in
       fm_v4l2_init_video_device()
     - cpupower : frequency-set -r option misses the last cpu in related cpu
       list
     - [s390x] qdio: handle PENDING state for QEBSM devices
     - perf cs-etm: Properly set the value of 'old' and 'head' in snapshot mode
     - [armhf] gpio: omap: fix lack of irqstatus_raw0 for OMAP4
     - [armhf] gpio: omap: ensure irq is enabled before wakeup
     - regmap: fix bulk writes on paged registers
     - bpf: silence warning messages in core
     - rcu: Force inlining of rcu_read_lock()
     - blkcg, writeback: dead memcgs shouldn't contribute to writeback ownership
       arbitration
     - xfrm: fix sa selector validation
     - perf evsel: Make perf_evsel__name() accept a NULL argument
     - vhost_net: disable zerocopy by default
     - ipoib: correcly show a VF hardware address
     - EDAC/sysfs: Fix memory leak when creating a csrow object
     - ipsec: select crypto ciphers for xfrm_algo
     - media: i2c: fix warning same module names
     - ntp: Limit TAI-UTC offset
     - timer_list: Guard procfs specific code
     - [arm64] acpi: ignore 5.1 FADTs that are reported as 5.0
     - mt7601u: do not schedule rx_tasklet when the device has been disconnected
     - mt7601u: fix possible memory leak when the device is disconnected
     - ath10k: fix PCIE device wake up failed
     - perf tools: Increase MAX_NR_CPUS and MAX_CACHES
     - libata: don't request sense data on !ZAC ATA devices
     - [armhf] clocksource/drivers/exynos_mct: Increase priority over ARM arch
       timer
     - rslib: Fix decoding of shortened codes
     - rslib: Fix handling of of caller provided syndrome
     - ixgbe: Check DDM existence in transceiver before access
     - crypto: asymmetric_keys - select CRYPTO_HASH where needed
     - EDAC: Fix global-out-of-bounds write when setting edac_mc_poll_msec
     - bcache: check c->gc_thread by IS_ERR_OR_NULL in cache_set_flush()
     - iwlwifi: mvm: Drop large non sta frames
     - net: usb: asix: init MAC address buffers
     - gpiolib: Fix references to gpiod_[gs]et_*value_cansleep() variants
     - Bluetooth: hci_bcsp: Fix memory leak in rx_skb
     - Bluetooth: 6lowpan: search for destination address in all peers
     - Bluetooth: Check state in l2cap_disconnect_rsp
     - Bluetooth: validate BLE connection interval updates
     - gtp: fix Illegal context switch in RCU read-side critical section.
     - gtp: fix use-after-free in gtp_newlink()
     - crypto: ghash - fix unaligned memory access in ghash_setkey()
     - [arm64] crypto: sha1-ce - correct digest for empty data in finup
     - [arm64] crypto: sha2-ce - correct digest for empty data in finup
     - crypto: chacha20poly1305 - fix atomic sleep when using async algorithm
     - [armhf] regulator: s2mps11: Fix buck7 and buck8 wrong voltages
     - [arm64] tegra: Update Jetson TX1 GPU regulator timings
     - iwlwifi: pcie: don't service an interrupt that was masked
     - tracing/snapshot: Resize spare buffer if size changed
     - NFSv4: Handle the special Linux file open access mode
     - lib/scatterlist: Fix mapping iterator when sg->offset is greater than
       PAGE_SIZE
     - ALSA: seq: Break too long mutex context in the write loop
     - [x86] ALSA: hda/realtek: apply ALC891 headset fixup to one Dell machine
     - media: v4l2: Test type instead of cfg->type in v4l2_ctrl_new_custom()
     - [x86] KVM: vPMU: refine kvm_pmu err msg when event creation failed
     - [arm64] tegra: Fix AGIC register range
     - fs/proc/proc_sysctl.c: fix the default values of i_uid/i_gid on /proc/sys
       inodes.
     - drm/nouveau/i2c: Enable i2c pads & busses during preinit
     - padata: use smp_mb in padata_reorder to avoid orphaned padata jobs
     - 9p/virtio: Add cleanup path in p9_virtio_init
     - PCI: Do not poll for PME if the device is in D3cold
     - Btrfs: add missing inode version, ctime and mtime updates when punching
       hole
     - libnvdimm/pfn: fix fsdax-mode namespace info-block zero-fields
     - take floppy compat ioctls to floppy.c
     - [x86] crypto: ccp - Validate the the error value used to index error
       messages
     - [x86] PCI: hv: Delete the device earlier from hbus->children for hot-
       remove
     - [x86] PCI: hv: Fix a use-after-free bug in hv_eject_device_work()
     - [ppc64el] watchpoint: Restore NV GPRs while returning from exception
     - eCryptfs: fix a couple type promotion bugs
     - [x86] intel_th: msu: Fix single mode with disabled IOMMU
     - Bluetooth: Add SMP workaround Microsoft Surface Precision Mouse bug
     - usb: Handle USB3 remote wakeup for LPM enabled devices correctly
     - dm bufio: fix deadlock with loop device
     - compiler.h: Add read_word_at_a_time() function.
     - ext4: allow directory holes
     - bnx2x: Prevent load reordering in tx completion processing
     - bnx2x: Prevent ptp_task to be rescheduled indefinitely
     - igmp: fix memory leak in igmpv3_del_delrec()
     - ipv4: don't set IPv6 only flags to IPv4 addresses
     - [armhf] net: dsa: mv88e6xxx: wait after reset deactivation
     - net: neigh: fix multiple neigh timer scheduling
     - net: openvswitch: fix csum updates for MPLS actions
     - nfc: fix potential illegal memory access
     - rxrpc: Fix send on a connected, but unbound socket
     - [x86] sky2: Disable MSI on ASUS P6T
     - vrf: make sure skb->data contains ip header to make routing
     - macsec: fix use-after-free of skb during RX
     - macsec: fix checksumming after decryption
     - netrom: fix a memory leak in nr_rx_frame()
     - netrom: hold sock when setting skb->destructor
     - bonding: validate ip header before check IPPROTO_IGMP
     - tcp: Reset bytes_acked and bytes_received when disconnecting
     - net: bridge: mcast: fix stale nsrcs pointer in igmp3/mld2 report handling
     - net: bridge: mcast: fix stale ipv6 hdr pointer when handling v6 query
     - net: bridge: stp: don't cache eth dest pointer before skb pull
     - [x86] perf/amd/uncore: Rename 'L2' to 'LLC'
     - [x86] perf/amd/uncore: Get correct number of cores sharing last level
       cache
     - [x86] perf/events/amd/uncore: Fix amd_uncore_llc ID to use pre-defined
       cpu_llc_id
     - NFSv4: Fix open create exclusive when the server reboots
     - nfsd: give out fewer session slots as limit approaches
     - nfsd: fix performance-limiting session calculation
     - nfsd: Fix overflow causing non-working mounts on 1 TB machines
     - [armhf,arm64] drm/panel: simple: Fix panel_simple_dsi_probe
     - usb: core: hub: Disable hub-initiated U1/U2
     - [armhf] pinctrl: rockchip: fix leaked of_node references
     - memstick: Fix error cleanup path of memstick_init
     - [arm64] tty: serial: msm_serial: avoid system lockup condition
     - serial: 8250: Fix TX interrupt handling condition
     - drm/virtio: Add memory barriers for capset cache.
     - phy: renesas: rcar-gen2: Fix memory leak at error paths
     - [armhf] drm/rockchip: Properly adjust to a true clock in adjusted_mode
     - tty: serial_core: Set port active bit in uart_port_activate
     - usb: gadget: Zero ffs_io_data
     - [ppc64el] pci/of: Fix OF flags parsing for 64bit BARs
     - PCI: sysfs: Ignore lockdep for remove attribute
     - iio: iio-utils: Fix possible incorrect mask calculation
     - [ppc64el] recordmcount: Fix spurious mcount entries on powerpc
     - mfd: core: Set fwnode for created devices
     - [arm64] mfd: hi655x-pmic: Fix missing return value check for
       devm_regmap_init_mmio_clk
     - RDMA/i40iw: Set queue pair state when being queried
     - perf test mmap-thread-lookup: Initialize variable to suppress memory
       sanitizer warning
     - RDMA/rxe: Fill in wc byte_len with IB_WC_RECV_RDMA_WITH_IMM
     - [ppc64el] boot: add {get, put}_unaligned_be32 to xz_config.h
     - f2fs: avoid out-of-range memory access
     - mailbox: handle failed named mailbox channel request
     - [ppc64el] eeh: Handle hugepages in ioremap space
     - 9p: pass the correct prototype to read_cache_page
     - mm/mmu_notifier: use hlist_add_head_rcu()
     - usb: wusbcore: fix unbalanced get/put cluster_id
     - [x86] usb: pci-quirks: Correct AMD PLL quirk detection
     - [x86] sysfb_efi: Add quirks for some devices with swapped width and
       height
     - [x86] speculation/mds: Apply more accurate check on hypervisor platform
     - [x86] hpet: Fix division by zero in hpet_time_div()
     - ALSA: line6: Fix wrong altsetting for LINE6_PODHD500_1
     - ALSA: hda - Add a conexant codec entry to let mute led work
     - access: avoid the RCU grace period for the temporary subjective
       credentials
     - [arm64] dts: marvell: Fix A37xx UART0 register size
     - i2c: qup: fixed releasing dma without flush operation completion
     - [arm64] compat: Provide definition for COMPAT_SIGMINSTKSZ
       (Closes: #904385)
     - ISDN: hfcsusb: checking idx of ep configuration
     - media: au0828: fix null dereference in error path
     - media: cpia2_usb: first wake up, then free in disconnect
     - media: radio-raremono: change devm_k*alloc to k*alloc
     - sched/fair: Don't free p->numa_faults with concurrent readers
     - drivers/pps/pps.c: clear offset flags in PPS_SETPARAMS ioctl
     - ceph: hold i_ceph_lock when removing caps for freeing inode
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.188
     - [armhf] dts: rockchip: Make rk3288-veyron-minnie run at hs200
     - [armhf] dts: rockchip: Make rk3288-veyron-mickey's emmc work again
     - [armhf] dts: rockchip: Mark that the rk3288 timer might stop in suspend
     - ftrace: Enable trampoline when rec count returns back to one
     - kernel/module.c: Only return -EEXIST for modules that have finished
       loading
     - fs/adfs: super: fix use-after-free bug
     - btrfs: fix minimum number of chunk errors for DUP
     - ceph: fix improper use of smp_mb__before_atomic()
     - ceph: return -ERANGE if virtual xattr value didn't fit in buffer
     - [s390x] scsi: zfcp: fix GCC compiler warning emitted with
       -Wmaybe-uninitialized
     - ACPI: fix false-positive -Wuninitialized warning
     - be2net: Signal that the device cannot transmit during reconfiguration
     - [x86] apic: Silence -Wtype-limits compiler warnings
     - mm/cma.c: fail if fixed declaration can't be honored
     - coda: add error handling for fget
     - coda: fix build using bare-metal toolchain
     - uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side
       headers
     - drivers/rapidio/devices/rio_mport_cdev.c: NUL terminate some strings
     - ipc/mqueue.c: only perform resource calculation if user valid
     - [x86] kvm: Don't call kvm_spurious_fault() from .fixup
     - [x86] boot: Remove multiple copy of static function
       sanitize_boot_params()
     - Btrfs: fix incremental send failure after deduplication
     - [armhf,arm64] mmc: dw_mmc: Fix occasional hang after tuning on eMMC
     - gpiolib: fix incorrect IRQ requesting of an active-low lineevent
     - selinux: fix memory leak in policydb_init()
     - [s390x] dasd: fix endless loop after read unit address configuration
     - [arm*] drivers/perf: arm_pmu: Fix failure path in PM notifier
     - xen/swiotlb: fix condition for calling xen_destroy_contiguous_region()
     - IB/mlx5: Fix RSS Toeplitz setup to be aligned with the HW specification
     - infiniband: fix race condition between infiniband mlx4, mlx5 driver and
       core dumping
     - coredump: fix race condition between collapse_huge_page() and core dumping
     - eeprom: at24: make spd world-readable again
     - Backport minimal compiler_attributes.h to support GCC 9
     - include/linux/module.h: copy __init/__exit attrs to init/cleanup_module
     - objtool: Support GCC 9 cold subfunction naming scheme
     - [x86] mm, gup: prevent get_page() race with munmap in paravirt guest
     https://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.189
     - scsi: fcoe: Embed fc_rport_priv in fcoe_rport structure
     - [armhf] dts: Add pinmuxing for i2c2 and i2c3 for LogicPD SOM-LV
     - [armhf] dts: Add pinmuxing for i2c2 and i2c3 for LogicPD torpedo
     - [armhf] dts: logicpd-som-lv: Fix Audio Mute
     - [arm64] cpufeature: Fix CTR_EL0 field definitions
     - [arm64] cpufeature: Fix feature comparison for CTR_EL0.{CWG,ERG}
     - tcp: be more careful in tcp_fragment()
     - HID: wacom: fix bit shift for Cintiq Companion 2
     - HID: Add quirk for HP X1200 PIXART OEM mouse
     - RDMA: Directly cast the sockaddr union to sockaddr
     - IB: directly cast the sockaddr union to aockaddr
     - objtool: Add machine_real_restart() to the noreturn list
     - objtool: Add rewind_stack_do_exit() to the noreturn list
     - libceph: use kbasename() and kill ceph_file_part()
     - atm: iphase: Fix Spectre v1 vulnerability
     - net: bridge: delete local fdb on device init failure
     - net: bridge: mcast: don't delete permanent entries when fast leave is
       enabled
     - net: fix ifindex collision during namespace removal
     - net/mlx5: Use reversed order when unregister devices
     - net: sched: Fix a possible null-pointer dereference in dequeue_func()
     - tipc: compat: allow tipc commands without arguments
     - compat_ioctl: pppoe: fix PPPOEIOCSFWD handling
     - ip6_tunnel: fix possible use-after-free on xmit
     - ife: error out when nla attributes are empty
     - bnx2x: Disable multi-cos feature.
     - [armhf,arm64] spi: bcm2835: Fix 3-wire mode if DMA is enabled
 .
   [ Ben Hutchings ]
   * Bump ABI to 11
   * siphash: implement HalfSipHash1-3 for hash tables (Closes: #935134)
   * netfilter: conntrack: Use consistent ct id hash calculation
     (fixes regression in 4.9.168-1+deb9u5)
Checksums-Sha1: 
 ac24c50c3c10eac3e297108c11f89d57eac4e428 125025 linux_4.9.189-1.dsc
 462bac183b9a94c5cedc297d8ae99750a325b2a6 94807908 linux_4.9.189.orig.tar.xz
 77d2b577f07394c8a6af941740b18e1b4ced64ff 1261508 linux_4.9.189-1.debian.tar.xz
 b7d024bdf7bb15150c6020af81e0440b52d5e3ea 37871 linux_4.9.189-1_source.buildinfo
 95c1cff4f36bf9f0310caa3a7d3b22739737fb6b 12526574 linux-doc-4.9_4.9.189-1_all.deb
 4d22a210a652d36555674b33b0631328cd3752ab 5768540 linux-headers-4.9.0-11-common-rt_4.9.189-1_all.deb
 ae75882cdfcf585bc095ef1e17563dafccebc8e4 7702646 linux-headers-4.9.0-11-common_4.9.189-1_all.deb
 9e20e3ead39bcec1cbf61e0366d33987c332205b 3237038 linux-manual-4.9_4.9.189-1_all.deb
 9b397f8ea00b58406c88b8e432a1b033a6205eff 96894314 linux-source-4.9_4.9.189-1_all.deb
 7f082e6c55cb0e4e393a9a40442539f6488fa4c9 702700 linux-support-4.9.0-11_4.9.189-1_all.deb
Checksums-Sha256: 
 0c0ed783191eb9efd3b2df335e968b6d0083875420641eef9516cad97ecc5b24 125025 linux_4.9.189-1.dsc
 f16329e227a1d4e359bd251fcaca21b0da83f1f00f03adc66e1062a479e1e5c4 94807908 linux_4.9.189.orig.tar.xz
 225146449bed67bd0284c6020320888982f42878354d3edb5cc75f7571b7e847 1261508 linux_4.9.189-1.debian.tar.xz
 e31254ec7b6471a18ae98fef870c9d3bf76521678bbccc3c4c44784e720c56a0 37871 linux_4.9.189-1_source.buildinfo
 7558ddc0793dab115d1ceea2276beedb212b9235188552bfba64feb66f747b27 12526574 linux-doc-4.9_4.9.189-1_all.deb
 ab7ffcb4dfbdcfe5cddaed3f693f3cd07050d3168f30dcaaec227f51de3fc294 5768540 linux-headers-4.9.0-11-common-rt_4.9.189-1_all.deb
 c1e3ed1ac90a68d391b587691a397e88b2112866ac8394ca5c8d246c086a789c 7702646 linux-headers-4.9.0-11-common_4.9.189-1_all.deb
 40ba46226debccd21c372cffaba18bb666b5071e5268d503810e55a0b97c2e1f 3237038 linux-manual-4.9_4.9.189-1_all.deb
 a92ef5135747fa96bc213368ba7b0a2aff76578b18946c2ab0993dc104de6599 96894314 linux-source-4.9_4.9.189-1_all.deb
 0cbef325aa30ca18b773a42255b8d3e20ffdacd8503ac1d8094e1ee8161ca4f6 702700 linux-support-4.9.0-11_4.9.189-1_all.deb
Files: 
 f4eaac908992a184b83619a4a3b8a3c7 125025 kernel optional linux_4.9.189-1.dsc
 d3574e6ed73bb4979584e60303400c09 94807908 kernel optional linux_4.9.189.orig.tar.xz
 1fd9424e05b1b91936ffd497ebca1888 1261508 kernel optional linux_4.9.189-1.debian.tar.xz
 a5525f5a077bc55e4c745de5b48fd0bf 37871 kernel optional linux_4.9.189-1_source.buildinfo
 75743481dde0cb088873696db6b66f82 12526574 doc optional linux-doc-4.9_4.9.189-1_all.deb
 4bc5f537172fcf30709307a169e1885a 5768540 kernel optional linux-headers-4.9.0-11-common-rt_4.9.189-1_all.deb
 4d341a3a619c21d152b089701480ddda 7702646 kernel optional linux-headers-4.9.0-11-common_4.9.189-1_all.deb
 45bb96f8ee08523f6f2b36c4b0362efd 3237038 doc optional linux-manual-4.9_4.9.189-1_all.deb
 e49b3d58eb91ff3838595ca238a35497 96894314 kernel optional linux-source-4.9_4.9.189-1_all.deb
 e5b4fe8fea2ec6d109858df0e3b68c38 702700 devel optional linux-support-4.9.0-11_4.9.189-1_all.deb

-----BEGIN PGP SIGNATURE-----
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=Gdlu
-----END PGP SIGNATURE-----

--- End Message ---

Reply to: