IPSEC crashes after r253088

Andrey V. Elsukov ae at FreeBSD.org
Tue Jul 23 07:32:04 UTC 2013


On 21.07.2013 00:43, Taku YAMAMOTO wrote:
> After r253088, systems with IPSEC and KSTACK_PAGES < 4 crashes on
> booting into multi-user mode.
> 
> The crash is due to sysctl -a in /etc/rc.d/initrandom ended up with
> kernel stack overflow.

> where type is struct ipsecstat which is 12560 bytes of size (larger than
> 3 pages) of size when processing net.inet.ipsec.ipsecstats.

Hi,

Only few fields of struct ipsecstat is used, the rest fields are never
updated. We can split it to several structures, or just remove unused
fields. What is better?

-- 
WBR, Andrey V. Elsukov


More information about the freebsd-current mailing list