1、問題復現方法

# step 1

ipset create foo hash:ip,port

# step 2 

for i in `seq 100 241`; do ipset add foo 192.168.122.$i; done

# step 3

ipset list -o xml 

2、問題分析結果

程序源碼存在bug，導致ipset輸出結果有誤

3、補丁及下載地址

·銀河麒麟高級服務器操作系統 V10 SP1
ipset(aarch64)軟件包下載地址:
https://update.cs2c.com.cn/NS/V10/V10SP1.1/os/adv/lic/updates/aarch64/Packages/ipset-7.3-2.p01.ky10.aarch64.rpm
https://update.cs2c.com.cn/NS/V10/V10SP1.1/os/adv/lic/updates/aarch64/Packages/ipset-devel-7.3-2.p01.ky10.aarch64.rpm
https://update.cs2c.com.cn/NS/V10/V10SP1.1/os/adv/lic/updates/aarch64/Packages/ipset-help-7.3-2.p01.ky10.noarch.rpm
https://update.cs2c.com.cn/NS/V10/V10SP1.1/os/adv/lic/updates/aarch64/Packages/ipset-libs-7.3-2.p01.ky10.aarch64.rpm
ipset(x86_64)軟件包下載地址:
https://update.cs2c.com.cn/NS/V10/V10SP1.1/os/adv/lic/updates/x86_64/Packages/ipset-7.3-2.p01.ky10.x86_64.rpm
https://update.cs2c.com.cn/NS/V10/V10SP1.1/os/adv/lic/updates/x86_64/Packages/ipset-devel-7.3-2.p01.ky10.x86_64.rpm
https://update.cs2c.com.cn/NS/V10/V10SP1.1/os/adv/lic/updates/x86_64/Packages/ipset-help-7.3-2.p01.ky10.noarch.rpm
https://update.cs2c.com.cn/NS/V10/V10SP1.1/os/adv/lic/updates/x86_64/Packages/ipset-libs-7.3-2.p01.ky10.x86_64.rpm

·銀河麒麟高級服務器操作系統 V10 SP2
ipset(aarch64)軟件包下載地址:
https://update.cs2c.com.cn/NS/V10/V10SP2/os/adv/lic/updates/aarch64/Packages/ipset-7.6-0.p01.ky10.aarch64.rpm
https://update.cs2c.com.cn/NS/V10/V10SP2/os/adv/lic/updates/aarch64/Packages/ipset-devel-7.6-0.p01.ky10.aarch64.rpm
https://update.cs2c.com.cn/NS/V10/V10SP2/os/adv/lic/updates/aarch64/Packages/ipset-help-7.6-0.p01.ky10.noarch.rpm
https://update.cs2c.com.cn/NS/V10/V10SP2/os/adv/lic/updates/aarch64/Packages/ipset-libs-7.6-0.p01.ky10.aarch64.rpm
ipset(x86_64)軟件包下載地址:
https://update.cs2c.com.cn/NS/V10/V10SP2/os/adv/lic/updates/x86_64/Packages/ipset-7.6-0.p01.ky10.x86_64.rpm
https://update.cs2c.com.cn/NS/V10/V10SP2/os/adv/lic/updates/x86_64/Packages/ipset-devel-7.6-0.p01.ky10.x86_64.rpm
https://update.cs2c.com.cn/NS/V10/V10SP2/os/adv/lic/updates/x86_64/Packages/ipset-help-7.6-0.p01.ky10.noarch.rpm
https://update.cs2c.com.cn/NS/V10/V10SP2/os/adv/lic/updates/x86_64/Packages/ipset-libs-7.6-0.p01.ky10.x86_64.rpm

4、修復和更新方法

修改程序源碼中的SNPRINTF_FAILUR宏，當ipset_print_port()返回-1時，使ipset_print_elem()和ipset_print_proto_port()函數能夠返回正確的結果，最終促使程序能夠先輸出和清空outbuf中的數據，之后再重新向outbuf中寫入當前”ip,port”記錄