Hello, This issue has been fixed upstream (ipset kernel part), see [1], which is not included in the 3.2 kernel of Wheezy.
I'll ask the Debian Kernel Team how to properly fix this issue. [1] Check and reject crazy /0 input parameters - http://git.netfilter.org/ipset/commit/kernel/net/netfilter/ipse/ip_set_bitmap_ip.c?id=a1cbbc8f86a8ef955708d48f20f8ca021a0a7641 On Fri, Dec 20, 2013 at 6:45 PM, Mi <mi.li...@alma.ch> wrote: > Package: ipset > Version: 6.12.1-1 > Severity: important > > > # ipset create ipv4_ch bitmap:ip range 0.0.0.0/0 > # ipset list > [ another previously defined hash:net set. No problem with that. ] > > Name: ipv4_ch > Type: bitmap:ip > Header: range 0.0.0.0-255.255.255.255 > Size in memory: 120 > References: 0 > Members: > > # ipset add ipv4_ch 5.1.96.0/21 > > Message from syslogd@pe1 at Dec 20 12:14:53 ... > kernel:[3088568.395819] Oops: 0002 [#1] SMP > > Message from syslogd@pe1 at Dec 20 12:14:53 ... > kernel:[3088568.398495] Stack: > > Message from syslogd@pe1 at Dec 20 12:14:53 ... > kernel:[3088568.398495] Call Trace: > > Message from syslogd@pe1 at Dec 20 12:14:53 ... > kernel:[3088568.398495] Code: 31 c0 48 85 ff 74 19 48 81 ff ff ff ff 7f b0 > 01 74 0e 48 8b 05 e7 af 1e e1 48 29 f8 48 c1 e8 3f c3 48 8b 47 40 0f b7 16 48 > 8b 00 <f0> 0f ab 10 19 d2 83 fa 01 19 c0 f7 d0 25 f9 ef ff ff c3 48 8b > > Message from syslogd@pe1 at Dec 20 12:14:53 ... > kernel:[3088568.398495] CR2: 0000000000000c10 > > Message from syslogd@pe1 at Dec 20 12:14:53 ... > kernel:[3088568.428341] Kernel panic - not syncing: Fatal exception in > interrupt > > > That's all. The machine hung completely and needed a hard reset. > > > > -- System Information: > Debian Release: 7.3 > APT prefers stable-updates > APT policy: (500, 'stable-updates'), (500, 'stable') > Architecture: amd64 (x86_64) > Foreign Architectures: i386 > > Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores) > Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) > Shell: /bin/sh linked to /bin/dash > > Versions of packages ipset depends on: > ii iptables 1.4.14-3.1 > ii libc6 2.13-38 > ii libipset2 6.12.1-1 > > ipset recommends no packages. > > ipset suggests no packages. > > -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org