Debian Patches

Status for iptables-netflow/2.6-6

Patch Description Author Forwarded Bugs Origin Last update
ignore-unknown-configure-options.patch Warn about unknown configure options instead of bailing out Avoids "Invalid option: --build=x86_64-linux-gnu" build error.
.
Additionally make it understand some configure options passed by
debhelper by default, namely --prefix, --libdir and --includedir.
Axel Beckert <abe@debian.org> no upstream
properly-pass-CPPFLAGS-and-LDFLAGS.patch Properly pass $CPPFLAGS and $LDFLAGS Axel Beckert <abe@debian.org> no
disable-kernel-check.patch Disable kernel check in configure script if no dkms is used This means it's skipped during package build but not during install
time when a build of the kernel module is being triggered via dkms.
Axel Beckert <abe@debian.org> not-needed
dont-hardcode-current-gcc.patch Don't hardcode default gcc version (i.e. don't override $CC if set) Avoids compilation failures with older kernels which can't be
compiled with the current gcc, e.g. 5.7 needs gcc-9 instead of the
current gcc-10 (where the gcc symlink points to).
Axel Beckert <abe@debian.org> no
cherry-pick_66e43041_namespace_sk_error_report.patch Namespace sk_error_report sk_error_report is introduced in v5.14-rc1: e3ae2365efc14 ("net: sock:
introduce sk_error_report").
.
Fixes compilation against kernel 5.14.

diff --git a/ipt_NETFLOW.c b/ipt_NETFLOW.c
index c4c049d..136c17c 100644
ABC <abc@openwall.com> no debian commit 66e4304101010108892376866334ec9317b427d8 2021-07-14
cherry-pick_6a55739a_fix_build_on_v5.15.patch [PATCH] Fix build on v5.15 (ct_event)
CC [M] ipt_NETFLOW.o
ipt_NETFLOW.c: In function netflow_conntrack_event:
ipt_NETFLOW.c:4622:31: error: struct nf_ct_event_notifier has no member named fcn
4622 | ret = notifier->fcn(events, item);
| ^~
ipt_NETFLOW.c: At top level:
ipt_NETFLOW.c:4687:10: error: struct nf_ct_event_notifier has no member named fcn
4687 | .fcn = netflow_conntrack_event
| ^~~
ipt_NETFLOW.c:4687:16: error: initialization of int (*)(unsigned int, const struct nf_ct_event *) from incompatible pointer type int (*)(const unsigned int, struct nf_ct_event *) [-Werror=incompatible-pointer-types]
4687 | .fcn = netflow_conntrack_event
| ^~~~~~~~~~~~~~~~~~~~~~~
ipt_NETFLOW.c:4687:16: note: (near initialization for ctnl_notifier.ct_event)
ipt_NETFLOW.c: In function unset_notifier_cb:
ipt_NETFLOW.c:5455:25: error: too many arguments to function nf_conntrack_unregister_notifier
5455 | nf_conntrack_unregister_notifier(NET_ARG &ctnl_notifier);
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In file included from ./include/net/netfilter/nf_conntrack_core.h:18,
from ipt_NETFLOW.c:68:
./include/net/netfilter/nf_conntrack_ecache.h:88:6: note: declared here
88 | void nf_conntrack_unregister_notifier(struct net *net);
| ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ABC <abc@openwall.com> yes debian upstream 2021-11-25
cherry-pick_0901f028_fix_building_on_old_kernels.patch commit 0901f028617acca350132a65293ab80a480bf233

fix building on old kernels

Link: https://github.com/aabc/ipt-netflow/pull/196
Vadim Fedorenko <vfedorenko@novek.ru> no 2022-03-28
cross.patch no
Use-explicit-fallthrough-macro.patch [PATCH] Use explicit fallthrough macro
Since `-Wimplicit-fallthrough=5` is emabled in Linux Makefile.
ABC <abc@openwall.com> no 2021-11-25
use-get_random_u32_below-instead-of-deprecated-prand.patch [PATCH] use get_random_u32_below() instead of deprecated prandom_u32_max() Paolo Pisati <paolo.pisati@canonical.com> no 2023-02-14
support-kernel-6.4.patch Cope with register_sysctl_paths removal in Linux kernel 6.4 Axel Beckert <abe@debian.org> yes debian upstream https://github.com/kalamlacki/ipt-netflow/commit/2a1d250a701405b81fdf3548b4b9c12bf266a306 and https://github.com/kalamlacki/ipt-netflow/commit/373b58781a0fc99fcb354ea3b5e4f3a006a71ab6
fix-dkms-warning.patch Avoid warning when building for a different kernel via DKMS Should remove warnings like this:
! Warning: uname kernel version (6.1.20) and dkms version of kernel source (6.4.0-0-amd64) doesn't match!
! You may try to specify only kernel source tree with --kdir=/lib/modules/6.4.0-0-amd64/build
! and configure will pick up version properly.
! Assuming you want to build for 6.4.0-0-amd64
Andreas Beckmann <anbe@debian.org> no https://bugs.debian.org/1038203

All known versions for source package 'iptables-netflow'

Links