Crash in pf(4) with a fairly recent RELENG_8

[Vlad Galu]

Luckily I could find this coredump:

-- cut here --
#0  doadump () at pcpu.h:223
#1  0xffffffff802f4ace in boot (howto=260) at ../../../kern/kern_shutdown.c:416
#2  0xffffffff802f4eab in panic (fmt=Variable "fmt" is not available.
) at ../../../kern/kern_shutdown.c:579
#3  0xffffffff805064d2 in trap_fatal (frame=0xffffff80000345c0, eva=0)
    at ../../../amd64/amd64/trap.c:857
#4  0xffffffff80506e8c in trap (frame=0xffffff80000345c0)
    at ../../../amd64/amd64/trap.c:644
#5  0xffffffff804eec93 in calltrap () at ../../../amd64/amd64/exception.S:224
#6  0xffffffff801a1140 in pf_state_tree_id_RB_MINMAX ()
    at ../../../contrib/pf/net/pf.c:401
#7  0xffffffff801a1210 in pf_src_tree_RB_FIND (head=Variable "head" is
not available.
)
    at ../../../contrib/pf/net/pf.c:396
#8  0xffffffff801a3594 in pf_insert_src_node (sn=0xffffff8000034868,
    rule=0xffffff0001694000, src=0xffffff000d75701c, af=2 '\002')
    at ../../../contrib/pf/net/pf.c:850
#9  0xffffffff801acd6e in pf_test_tcp (rm=0xffffff8000034978,
    sm=0xffffff8000034970, direction=1, kif=0xffffff000132ab00,
    m=0xffffff001e052b00, off=20, h=0xffffff000d757010, pd=0xffffff8000034990,
    am=0xffffff8000034980, rsm=0xffffff8000034968, ifq=0x0, inp=0x0)
    at ../../../contrib/pf/net/pf.c:3500
#10 0xffffffff801ae7a6 in pf_test (dir=1, ifp=0xffffff0001201000,
    m0=0xffffff8000034ac8, eh=Variable "eh" is not available.
) at ../../../contrib/pf/net/pf.c:7066
#11 0xffffffff801b33a9 in pf_check_in (arg=Variable "arg" is not available.
)
    at ../../../contrib/pf/net/pf_ioctl.c:3646
-- and here --



-- 
Good, fast & cheap. Pick any two.