kern/143653: [ipfw] [patch] ipfw nat redirect_port "buf is too small" error

[Jeff Kletsky]

The following reply was made to PR kern/143653; it has been noted by GNATS.

From: Jeff Kletsky <freebsd at wagsky.com>
To: bug-followup at FreeBSD.org, dima_bsd at inbox.lv
Cc:  
Subject: Re: kern/143653: [ipfw] [patch] ipfw nat redirect_port "buf is too
 small" error
Date: Sun, 27 Feb 2011 13:01:12 -0800

 Under some situations, can cause *kernel panic* with no automatic reboot 
 (just hangs on screen, HW reset required).
 Additionally, the firewall script being executed has zero-byte length on 
 reboot.
 
 In my case, it was 15 redirect rules entered. RELEASE-8.2 amd64
 
 Copying by hand from the screen:
 
 unknown redirect mode: 0
 panic: LibAliasRedirect* returned NULL
 cpuid = 0
 
 The stack backtrace includes:
 
 kdb_backtrace+0x5e
 panic+0x187
 ipfw_nat_cfg+0x35a
 ipfw_ctl+0x211
 rip_ctloutput+0x9f
 sosetopt+0x42
 kern_setsockopt+0xc0
 setsockopt+0x22
 syscallenter+0x1e5
 syscall+0x4b
 Xfast_syscall+0xe2
 
 Kernel dump and configuration files now available in 
 http://wildside.wagsky.com/pr143653/
 
 Should be able to replicate by installing RELEASE-8.2, those config 
 files (adjusting as needed for the two network interfaces) and copying 
 twoport.crashes to the target of the twoport symlink.
 
 [root at port7 /var/crash]# uname -a
 FreeBSD port7.pn.wagsky.com 8.2-RELEASE FreeBSD 8.2-RELEASE #0: Thu Feb 
 17 02:41:51 UTC 2011     
 root at mason.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC  amd64