kern/168190: [pf] panic when using pf and route-to (maybe: bad
fragment handling?)
Joerg Pulz
Joerg.Pulz at frm2.tum.de
Tue Jun 5 12:50:06 UTC 2012
The following reply was made to PR kern/168190; it has been noted by GNATS.
From: Joerg Pulz <Joerg.Pulz at frm2.tum.de>
To: Daniel Hartmeier <daniel at benzedrine.cx>
Cc: bug-followup at freebsd.org, freebsd-pf at freebsd.org
Subject: Re: kern/168190: [pf] panic when using pf and route-to (maybe: bad
fragment handling?)
Date: Tue, 5 Jun 2012 14:41:20 +0200 (CEST)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Tue, 5 Jun 2012, Joerg Pulz wrote:
> On Mon, 4 Jun 2012, Daniel Hartmeier wrote:
>
>> Here's a patch that directly tests this theory.
>>
>> If correct, it will replace the panics with simple log messages that
>> show when ipfilter left an m_len==0 mbuf.
>
> Daniel,
>
> seems that your patch fixed it.
> I've seen the following log entry:
>
> Jun 5 02:15:33 charon kernel: fr_check_wrapper: m_len 0 fixed
>
> No panic and everything is running smooth.
> I will go and recompile the kernel with all the IPFIREWALL options
> reenabled to make sure that the byte ordering problem does not appear.
>
> I will report back.
Daniel,
as promised here is my report.
Your patch resolved all problems and panics.
I've seen two log entries since i reenabled all IPFIREWALL options.
Jun 5 14:07:19 charon kernel: fr_check_wrapper: m_len 0 fixed
Jun 5 14:07:19 charon kernel: fr_check_wrapper: m_len 0 fixed
No panics or other messages. Everything is running fine now.
Thanks again
Joerg
- --
The beginning is the most important part of the work.
-Plato
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (FreeBSD)
iD8DBQFPzf5zSPOsGF+KA+MRAvC3AJsFAEf8axpmvfu3VPUiaFprhIT6KwCfSKMI
J1Ywq6NYvDeHHXiVjuWSRWw=
=k6q6
-----END PGP SIGNATURE-----
More information about the freebsd-pf
mailing list