kern/71836: RELENG_5 buildkernel problem with FAST_IPSEC + pf

[Eivind Olsen]

>Number:         71836
>Category:       kern
>Synopsis:       RELENG_5 buildkernel problem with FAST_IPSEC + pf
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Sep 18 00:40:27 GMT 2004
>Closed-Date:
>Last-Modified:
>Originator:     Eivind Olsen
>Release:        FreeBSD 5.2.1-RELEASE-p9 i386
>Organization:
Aminor
>Environment:
System: FreeBSD vimes.eivind 5.2.1-RELEASE-p9 FreeBSD 5.2.1-RELEASE-p9 #0: Tue Jul 6 01:31:41 CEST 2004 root at vimes.eivind:/usr/obj/usr/src/sys/VIMES i386


	
>Description:
	Problems when trying to compile a RELENG_5 kernel which includes both FAST_IPSEC + pc
>How-To-Repeat:
First, I added the following lines to GENERIC, and the kernel compiled fine:

options               FAST_IPSEC      #new IPsec (cannot define w/ IPSEC)
device                crypto          # core crypto support
device                cryptodev       # /dev/crypto for access to h/w
device                rndtest         # FIPS 140-2 entropy tester
device                hifn            # Hifn 7951, 7781, etc.
options               HIFN_DEBUG      # enable debugging support:
hw.hifn.debug
options               HIFN_RNDTEST    # enable rndtest support

Then, I added:

device                pf              #PF OpenBSD packet-filter firewall
device                pflog           #logging support interface for PF
device                pfsync          #synchronization interface for PF

and I got the following error:

cc -c -O -pipe -march=pentium3 -Wall -Wredundant-decls -Wnested-externs -Wst
rict-prototypes  -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual  
-fformat-extensions -std=c99  -nostdinc -I-  -I. -I/usr/src/sys -I/usr/src/s
ys/contrib/dev/acpica -I/usr/src/sys/contrib/altq -I/usr/src/sys/contrib/ipf
ilter -I/usr/src/sys/contrib/pf -I/usr/src/sys/contrib/dev/ath -I/usr/src/sy
s/contrib/dev/ath/freebsd -I/usr/src/sys/contrib/ngatm -D_KERNEL -include
opt_global.h -fno-common -finline-limit=8000 --param
inline-unit-growth=100 --param
arge-function-growth=1000  -mno-align-long-strings -mpreferred-stack-boundar
y=2 -ffreestanding -Werror  /usr/src/sys/netinet/ip_id.c
cc -c -O -pipe -march=pentium3 -Wall -Wredundant-decls -Wnested-externs -Wst
rict-prototypes  -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual  
-fformat-extensions -std=c99  -nostdinc -I-  -I. -I/usr/src/sys -I/usr/src/s
ys/contrib/dev/acpica -I/usr/src/sys/contrib/altq -I/usr/src/sys/contrib/ipf
ilter -I/usr/src/sys/contrib/pf -I/usr/src/sys/contrib/dev/ath -I/usr/src/sy
s/contrib/dev/ath/freebsd -I/usr/src/sys/contrib/ngatm -D_KERNEL -include
opt_global.h -fno-common -finline-limit=8000 --param
inline-unit-growth=100 --param
arge-function-growth=1000  -mno-align-long-strings -mpreferred-stack-boundar
y=2 -ffreestanding -Werror  /usr/src/sys/netinet/in_pcb.c
cc -c -O -pipe -march=pentium3 -Wall -Wredundant-decls -Wnested-externs -Wst
rict-prototypes  -Wmissing-prototypes -Wpointer-arith -Winline -Wcast-qual  
-fformat-extensions -std=c99  -nostdinc -I-  -I. -I/usr/src/sys -I/usr/src/s
ys/contrib/dev/acpica -I/usr/src/sys/contrib/altq -I/usr/src/sys/contrib/ipf
ilter -I/usr/src/sys/contrib/pf -I/usr/src/sys/contrib/dev/ath -I/usr/src/sy
s/contrib/dev/ath/freebsd -I/usr/src/sys/contrib/ngatm -D_KERNEL -include
opt_global.h -fno-common -finline-limit=8000 --param
inline-unit-growth=100 --param
arge-function-growth=1000  -mno-align-long-strings -mpreferred-stack-boundar
y=2 -ffreestanding -Werror  /usr/src/sys/netinet/in_proto.c
In file included from /usr/src/sys/netinet/in_proto.c:91:
/usr/src/sys/contrib/pf/net/pfvar.h:57: error: redefinition of `union
sockaddr_union'
*** Error code 1

Stop in /usr/obj/usr/src/sys/VIMES.
*** Error code 1

Stop in /usr/src.
*** Error code 1

Stop in /usr/src.

Finally, I commented out the FAST_IPSEC line, and the kernel compiled fine
again.
Looks like there might be something odd with pf + FAST_IPSEC? Or am I
misinterpreting things here?
	
>Fix:

	


>Release-Note:
>Audit-Trail:
>Unformatted: