[cobalt] add support for cobalt microservers (mips-based)

[openwrt.git] / package / iptables / patches / 1.4.3.2 / 002-layer7_2.17.patch

diff --git a/package/iptables/patches/1.4.3.2/002-layer7_2.17.patch b/package/iptables/patches/1.4.3.2/002-layer7_2.17.patch
index ac6b1a4..a62d87f 100644 (file)
--- a/package/iptables/patches/1.4.3.2/002-layer7_2.17.patch
+++ b/package/iptables/patches/1.4.3.2/002-layer7_2.17.patch
@@ -1,6 +1,6 @@
-diff -Nur iptables.old/extensions/libxt_layer7.c iptables.new/extensions/libxt_layer7.c
---- iptables.old/extensions/libxt_layer7.c     1970-01-01 01:00:00.000000000 +0100
-+++ iptables.new/extensions/libxt_layer7.c     2008-08-22 16:00:52.000000000 +0200
+diff -Nur a/libxt_layer7.c b/libxt_layer7.c
+--- a/extensions/libxt_layer7.c        1970-01-01 01:00:00.000000000 +0100
++++ b/extensions/libxt_layer7.c        2008-08-22 16:00:52.000000000 +0200

 @@ -0,0 +1,368 @@
 +/* 
 +   Shared library add-on to iptables for layer 7 matching support. 
 @@ -0,0 +1,368 @@
 +/* 
 +   Shared library add-on to iptables for layer 7 matching support. 


@@ -89,12 +89,12 @@ diff -Nur iptables.old/extensions/libxt_layer7.c iptables.new/extensions/libxt_l
 +                      /* sanity check.  First non-comment non-blank 
 +                      line must be the same as the file name. */
 +                      if(strcmp(line, protoname))
 +                      /* sanity check.  First non-comment non-blank 
 +                      line must be the same as the file name. */
 +                      if(strcmp(line, protoname))

-+                              exit_error(OTHER_PROBLEM, 
++                              xtables_error(OTHER_PROBLEM, 

 +                                      "Protocol name (%s) doesn't match file name (%s).  Bailing out\n",
 +                                      line, filename);
 +
 +                      if(strlen(line) >= MAX_PROTOCOL_LEN)
 +                                      "Protocol name (%s) doesn't match file name (%s).  Bailing out\n",
 +                                      line, filename);
 +
 +                      if(strlen(line) >= MAX_PROTOCOL_LEN)

-+                               exit_error(PARAMETER_PROBLEM, 
++                               xtables_error(PARAMETER_PROBLEM, 

 +                                      "Protocol name in %s too long!", filename);
 +                      strncpy(info->protocol, line, MAX_PROTOCOL_LEN);
 +
 +                                      "Protocol name in %s too long!", filename);
 +                      strncpy(info->protocol, line, MAX_PROTOCOL_LEN);
 +


@@ -103,18 +103,18 @@ diff -Nur iptables.old/extensions/libxt_layer7.c iptables.new/extensions/libxt_l
 +              else if(datatype == pattern)
 +              {
 +                      if(strlen(line) >= MAX_PATTERN_LEN)
 +              else if(datatype == pattern)
 +              {
 +                      if(strlen(line) >= MAX_PATTERN_LEN)

-+                               exit_error(PARAMETER_PROBLEM, "Pattern in %s too long!", filename);
++                               xtables_error(PARAMETER_PROBLEM, "Pattern in %s too long!", filename);

 +                      strncpy(info->pattern, line, MAX_PATTERN_LEN);
 +                      
 +                      datatype = done;                        
 +                      break;
 +              }
 +              else
 +                      strncpy(info->pattern, line, MAX_PATTERN_LEN);
 +                      
 +                      datatype = done;                        
 +                      break;
 +              }
 +              else

-+                      exit_error(OTHER_PROBLEM, "Internal error");
++                      xtables_error(OTHER_PROBLEM, "Internal error");

 +      }
 +
 +      if(datatype != done)
 +      }
 +
 +      if(datatype != done)

-+              exit_error(OTHER_PROBLEM, "Failed to get all needed data from %s", filename);
++              xtables_error(OTHER_PROBLEM, "Failed to get all needed data from %s", filename);

 +
 +      if(line) free(line);
 +      fclose(f);
 +
 +      if(line) free(line);
 +      fclose(f);


@@ -133,7 +133,7 @@ diff -Nur iptables.old/extensions/libxt_layer7.c iptables.new/extensions/libxt_l
 +                case 'A' ... 'F':
 +                        return c - 'A' + 10;
 +                default:
 +                case 'A' ... 'F':
 +                        return c - 'A' + 10;
 +                default:

-+                        exit_error(OTHER_PROBLEM, "hex2dec: bad value!\n");
++                        xtables_error(OTHER_PROBLEM, "hex2dec: bad value!\n");

 +                        return 0;
 +        }
 +}
 +                        return 0;
 +        }
 +}


@@ -210,7 +210,7 @@ diff -Nur iptables.old/extensions/libxt_layer7.c iptables.new/extensions/libxt_l
 +      if (n < 0)
 +      {
 +            perror("scandir");
 +      if (n < 0)
 +      {
 +            perror("scandir");

-+          exit_error(OTHER_PROBLEM, "Couldn't open %s\n", dirname);
++          xtables_error(OTHER_PROBLEM, "Couldn't open %s\n", dirname);

 +      }
 +        else 
 +      {
 +      }
 +        else 
 +      {


@@ -267,7 +267,7 @@ diff -Nur iptables.old/extensions/libxt_layer7.c iptables.new/extensions/libxt_l
 +              int c = snprintf(filename, MAX_FN_LEN, "%s/%s/%s.pat", dir, subdirs[n], s);
 +
 +              if(c > MAX_FN_LEN)
 +              int c = snprintf(filename, MAX_FN_LEN, "%s/%s/%s.pat", dir, subdirs[n], s);
 +
 +              if(c > MAX_FN_LEN)

-+                      exit_error(OTHER_PROBLEM, 
++                      xtables_error(OTHER_PROBLEM, 

 +                              "Filename beginning with %s is too long!\n", filename);
 +
 +              /* read in the pattern from the file */
 +                              "Filename beginning with %s is too long!\n", filename);
 +
 +              /* read in the pattern from the file */


@@ -280,7 +280,7 @@ diff -Nur iptables.old/extensions/libxt_layer7.c iptables.new/extensions/libxt_l
 +      }
 +
 +      if(!done)
 +      }
 +
 +      if(!done)

-+              exit_error(OTHER_PROBLEM, 
++              xtables_error(OTHER_PROBLEM, 

 +                      "Couldn't find a pattern definition file for %s.\n", s);
 +
 +      /* process \xHH escapes and tolower everything. (our regex lib has no
 +                      "Couldn't find a pattern definition file for %s.\n", s);
 +
 +      /* process \xHH escapes and tolower everything. (our regex lib has no


@@ -305,7 +305,7 @@ diff -Nur iptables.old/extensions/libxt_layer7.c iptables.new/extensions/libxt_l
 +
 +      case 'd':
 +              if(strlen(argv[optind-1]) >= MAX_FN_LEN)
 +
 +      case 'd':
 +              if(strlen(argv[optind-1]) >= MAX_FN_LEN)

-+                      exit_error(PARAMETER_PROBLEM, "directory name too long\n");
++                      xtables_error(PARAMETER_PROBLEM, "directory name too long\n");

 +
 +              strncpy(l7dir, argv[optind-1], MAX_FN_LEN);
 +
 +
 +              strncpy(l7dir, argv[optind-1], MAX_FN_LEN);
 +


@@ -323,7 +323,7 @@ diff -Nur iptables.old/extensions/libxt_layer7.c iptables.new/extensions/libxt_l
 +static void final_check(unsigned int flags)
 +{
 +      if (!flags)
 +static void final_check(unsigned int flags)
 +{
 +      if (!flags)

-+              exit_error(PARAMETER_PROBLEM,
++              xtables_error(PARAMETER_PROBLEM,

 +                         "LAYER7 match: You must specify `--l7proto'");
 +}
 +
 +                         "LAYER7 match: You must specify `--l7proto'");
 +}
 +


@@ -370,9 +370,9 @@ diff -Nur iptables.old/extensions/libxt_layer7.c iptables.new/extensions/libxt_l
 +{
 +      xtables_register_match(&layer7);
 +}
 +{
 +      xtables_register_match(&layer7);
 +}

-diff -Nur iptables.old/extensions/libxt_layer7.man iptables.new/extensions/libxt_layer7.man
---- iptables.old/extensions/libxt_layer7.man   1970-01-01 01:00:00.000000000 +0100
-+++ iptables.new/extensions/libxt_layer7.man   2008-08-22 16:00:52.000000000 +0200
+diff -Nur a/libxt_layer7.man b/libxt_layer7.man
+--- a/extensions/libxt_layer7.man      1970-01-01 01:00:00.000000000 +0100
++++ b/extensions/libxt_layer7.man      2008-08-22 16:00:52.000000000 +0200

 @@ -0,0 +1,14 @@
 +This module matches packets based on the application layer data of 
 +their connections.  It uses regular expression matching to compare 
 @@ -0,0 +1,14 @@
 +This module matches packets based on the application layer data of 
 +their connections.  It uses regular expression matching to compare