[Bug 217997] [pf] orphaned entries in src-track

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Thu Mar 30 04:38:33 UTC 2017


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217997

--- Comment #8 from Max <maximos at als.nnov.ru> ---
I think the problem is in pf_create_state():

        /* check maximums */
        if (r->max_states &&
            (counter_u64_fetch(r->states_cur) >= r->max_states)) {
                counter_u64_add(V_pf_status.lcounters[LCNT_STATES], 1);
                REASON_SET(&reason, PFRES_MAXSTATES);
                return (PF_DROP);
        }

We can't just return here. Arguably we should "goto csfailed;" instead.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-pf mailing list