From owner-freebsd-stable@FreeBSD.ORG  Sun Jul 13 18:37:52 2003
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 1EDDD37B401
	for <stable@freebsd.org>; Sun, 13 Jul 2003 18:37:52 -0700 (PDT)
Received: from pyroxene.sentex.ca (pyroxene.sentex.ca [199.212.134.18])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 7377F43F3F
	for <stable@freebsd.org>; Sun, 13 Jul 2003 18:37:51 -0700 (PDT)
	(envelope-from mike@sentex.net)
Received: from simian.sentex.net (simeon.sentex.ca [192.168.43.27])
	by pyroxene.sentex.ca (8.12.9/8.12.8) with ESMTP id h6E1bo8D065830
	for <stable@freebsd.org>; Sun, 13 Jul 2003 21:37:50 -0400 (EDT)
	(envelope-from mike@sentex.net)
Message-Id: <5.2.0.9.0.20030713213320.04d45040@209.112.4.2>
X-Sender: mdtpop@209.112.4.2 (Unverified)
X-Mailer: QUALCOMM Windows Eudora Version 5.2.0.9
Date: Sun, 13 Jul 2003 21:38:49 -0400
To: stable@freebsd.org
From: Mike Tancsa <mike@sentex.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
X-Virus-Scanned: By Sentex Communications (lava/20020517)
Subject: Re: cvs commit: src/sys/netipsec ipsec.c key.c
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Production branch of FreeBSD source code
	<freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 14 Jul 2003 01:37:52 -0000


Hi all, I have been seeing memory allocation errors on a few FreeBSD boxes 
running IPSEC. Does anyone know if the commit below addresses such a 
problem ? Or is this a racoon issue ?  I did a search on google and have 
not seen anyone else mention this particular issue.

Jul 14 00:57:57 d1terA9 racoon: ERROR: pfkey.c:210:pfkey_handler():
pfkey ADD failed: Cannot allocate memory

The code appears to be

         /* validity check */
         if (msg->sadb_msg_errno) {
                 int pri;

                 /* when SPD is empty, treat the state as no error. */
                 if (msg->sadb_msg_type == SADB_X_SPDDUMP &&
                     msg->sadb_msg_errno == ENOENT)
                         pri = LLV_DEBUG;
                 else
                         pri = LLV_ERROR;

                 plog(pri, LOCATION, NULL,
                         "pfkey %s failed: %s\n",
                         s_pfkey_type(msg->sadb_msg_type),
                         strerror(msg->sadb_msg_errno));

                 goto end;
         }

         ---Mike

At 06:38 PM 30/06/2003 -0700, Sam Leffler wrote:
>sam         2003/06/30 18:38:13 PDT
>
>   FreeBSD src repository
>
>   Modified files:        (Branch: RELENG_4)
>     sys/netipsec         ipsec.c key.c
>   Log:
>   MFC: plug xform memory leaks
>
>   Revision  Changes    Path
>   1.2.2.2   +2 -0      src/sys/netipsec/ipsec.c
>   1.3.2.2   +13 -2     src/sys/netipsec/key.c
>_______________________________________________
>cvs-all@freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/cvs-all
>To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"