ipt_sctp chunk map definition too large

Greetings,

In the process of implementing a native Java iptables API, I discovered a bug in the ipt_sctp.h header file where the chunkmap is defined too large. This obviously does not affect execution, but will result in increased memory useage in libiptc, or in my case the java process.

Tim Ozor ([email protected])

diff -uprN linux-2.6.11.2.orig/include/linux/netfilter_ipv4/ipt_sctp.h linux-2.6.11.2/include/linux/netfilter_ipv4/ipt_sctp.h
@@ -22,7 +22,7 @@ struct ipt_sctp_info {
        u_int16_t dpts[2];  /* Min, Max */
        u_int16_t spts[2];  /* Min, Max */
 
-       u_int32_t chunkmap[256 / sizeof (u_int32_t)];  /* Bit mask of chunks to be matched according to RFC 2960 */
+       u_int32_t chunkmap[256 / (sizeof(u_int32_t)*8)];  /* Bit mask of chunks to be matched according to RFC 2960 */
 
 #define SCTP_CHUNK_MATCH_ANY   0x01  /* Match if any of the chunk 

types are present */
#define SCTP_CHUNK_MATCH_ALL 0x02 /* Match if all of the chunk
types are present */

Unfortunately we can't fix it this way since it breaks userspace compatiblity. You might be able to retain compatiblity using Rusty's new revision stuff, but I doubt it's worth it.

Regards
Patrick