panic: m_copm, length > size of mbuf chain

[Max Laier]

On Monday 26 January 2004 14:21, Andre Oppermann wrote:
> sebastian ssmoller wrote:
> > hi,
> > my system ran stable for several days now but suddenly this error
> > occured. At this moment i did nothing special - just surfing the net
> > ...
> >
> > cause i have no serial line attached i could only get the following
> > infos: Debugger(...) at Debugger+0x54
> > panic(...) at panic+0xd5
> > m_copym(...)
> > ip_fragment(...)
> > ip_output(...)
> > ip_forward(...)
> >
> > i didnt want to write down all these numbers(addresses) by hand,
> > should i ?
> >
> > it seems to have to do something with inet/ip so i possibly should
> > mention that i disabled "option inet6" in kernel and that i use "pf"
> > as packet filter.
> >
> > $ uname -a
> > FreeBSD tyrael.linnet 5.2-CURRENT FreeBSD 5.2-CURRENT #2: Mon Jan 19
> > 22:26:43 CET 2004    
> > root at tyrael.linnet:/usr/obj/usr/src-current/sys/DEBUG  i386
> >
> > i can provide more info if needed...
>
> This looks like a host/network byte order problem in relation with the
> 'pf' packet filter.  ip_output() expects the ip_off field to be in host
> byte order.  If this is not the case you will get bogus length values
> for fragmentation.

Anybody else seeing this?

Can you please try attached patch against pf_ioctl.c (for convenience just 
to throw into security/pf/files) and report success/failure.

-- 
Best regards,				| max at love2party.net
Max Laier				| ICQ #67774661
http://pf4freebsd.love2party.net/	| mlaier at EFnet
-------------- next part --------------
A non-text attachment was scrubbed...
Name: patch-ac
Type: text/x-diff
Size: 457 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20040128/40e526d5/patch-ac-0001.bin