[Bug 209475] pf didn't check if enough free RAM for net.pf.states_hashsize

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sun Mar 18 11:26:00 UTC 2018


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=209475

--- Comment #33 from commit-hook at freebsd.org ---
A commit references this bug:

Author: kp
Date: Sun Mar 18 11:25:40 UTC 2018
New revision: 331116
URL: https://svnweb.freebsd.org/changeset/base/331116

Log:
  MFC r329950:

  pf: Cope with overly large net.pf.states_hashsize

  If the user configures a states_hashsize or source_nodes_hashsize value we
may
  not have enough memory to allocate this. This used to lock up pf, because
these
  allocations used M_WAITOK.

  Cope with this by attempting the allocation with M_NOWAIT and falling back to
  the default sizes (with M_WAITOK) if these fail.

  PR:           209475
  Submitted by: Fehmi Noyan Isi <fnoyanisi AT yahoo.com>

Changes:
_U  stable/11/
  stable/11/sys/net/pfvar.h
  stable/11/sys/netpfil/pf/pf.c

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-pf mailing list