Bugzilla Bug 166201

I got this error after upgrading to sys-kernel/gentoo-sources-2.6.20(with
net-firewall/iptables-1.3.7).

# iptables --table mangle --append OUTPUT --jump MARK --set-mark 2
iptables: Invalid argument

dmesg says:
ip_tables: MARK target: invalid size 16 != 24

similar error occurs when using CONNMARK target, mark match and connmark match.

I found an entry on the netfilter mailing list saying:
The latest -git kernel includes compatibility functions for 32 bit
userspace. You need to compile your iptables without the
KERNEL_64_USERSPACE_32 thing though (edit main Makefile).


I did so and removed -DKERNEL_64_USERSPACE_32 from the Makefile and it worked.

# emerge --info
Portage 2.1.2-r9 (default-linux/sparc/sparc64/2006.1, gcc-3.4.6,
glibc-2.3.6-r5, 2.6.20 sparc64)
=================================================================
System uname: 2.6.20 sparc64 sun4u
Gentoo Base System version 1.12.9
Timestamp of tree: Sat, 10 Feb 2007 01:50:01 +0000
dev-lang/python:     2.4.4
dev-python/pycrypto: 2.0.1-r5
sys-apps/sandbox:    1.2.18.1
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.17
sys-devel/gcc-config: 1.3.14
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r6
ACCEPT_KEYWORDS="sparc ~sparc"
AUTOCLEAN="yes"
CBUILD="sparc-unknown-linux-gnu"
CFLAGS="-mcpu=ultrasparc -mtune=ultrasparc -O2 -pipe"
CHOST="sparc-unknown-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/env.d /etc/gconf /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-mcpu=ultrasparc -mtune=ultrasparc -O2 -pipe"
DISTDIR="/tmp/distfiles"
FEATURES="sandbox userfetch userpriv usersandbox"
GENTOO_MIRRORS="http://gentoo.mneisen.org/
http://gd.tuwien.ac.at/opsys/linux/gentoo/
http://ftp-stud.fht-esslingen.de/pub/Mirrors/gentoo/
ftp://gentoo.inode.at/source/ ftp://ftp.mneisen.org/gentoo"
LANG="de_DE.UTF-8"
LINGUAS="de en"
MAKEOPTS="-j3"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress
--force --whole-file --delete --delete-after --stats --timeout=180
--exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="7zip alsa apache2 bittorrent bzip2 cli crypt cvs dedicated extensions gd
gif gzip hddtemp ipv6 jpeg jpeg2k l7filter mail mbox md5sum mp3 multiuser mysql
ncurses net network nfs nls no-old-linux nocd nojava nowin nptl nptlonly ogg
p2p pcap pcre perl php png python readline ruby sendmail serial server session
sftp smp smtp snmp sound sounds sparc srv ssl subversion symlink tar threads
threadsafe threadsonly udev ultra1 unicode unzip user-homedirs userlocales
verbose vnc vorbis xml zip zlib" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix
dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter
mulaw multi null plug rate route share shm softvol" ELIBC="glibc"
INPUT_DEVICES="keyboard mouse" KERNEL="linux" LINGUAS="de en" USERLAND="GNU"
VIDEO_CARDS="dummy sunffb"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LC_ALL, LDFLAGS,
PORTAGE_RSYNC_EXTRA_OPTS

Reassigning to base-system, not much we (kernel team) can do about this.

sparc team needs to verify this is OK ...

Makefile:
# Sparc64 hack
ifeq ($(shell uname -m),sparc64)
    POINTERTEST:=1
    32bituser := $(shell echo -e "\#include <stdio.h>\n\#if ........
    ifdef 32bituser
        # The kernel is 64-bit, even though userspace is 32.
        CFLAGS+=-DIPT_MIN_ALIGN=8 -DKERNEL_64_USERSPACE_32
    else
        EXT_LDFLAGS+=-Wl,-m,elf64_sparc
    endif
endif

Created an attachment (id=110137) [details]
Disable KERNEL_64_USERSPACE_32

Seems to work fine, but it breaks the ULOG target - however ulogd never worked
right on sparc so it's a non-issue for the time being.

Committed into the iptables-1.3.7 ebuild.