From nobody Mon Mar 28 07:44:14 2022
X-Original-To: freebsd-pf@mlmmj.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
	by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 951231A4A601;
	Mon, 28 Mar 2022 07:44:18 +0000 (UTC)
	(envelope-from kp@FreeBSD.org)
Received: from smtp.freebsd.org (smtp.freebsd.org [96.47.72.83])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
	 key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
	 client-signature RSA-PSS (4096 bits) client-digest SHA256)
	(Client CN "smtp.freebsd.org", Issuer "R3" (verified OK))
	by mx1.freebsd.org (Postfix) with ESMTPS id 4KRl823rhLz4cND;
	Mon, 28 Mar 2022 07:44:18 +0000 (UTC)
	(envelope-from kp@FreeBSD.org)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim;
	t=1648453458;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding:
	 in-reply-to:in-reply-to:references:references;
	bh=mJlImrBCYfdY9hIKFWLA5hfLmVgEB1OGyxOfVFZqLOI=;
	b=dlEiF2YUc4qccC38V1MBn2rl8fk4PQ2Otf/QbRRa+m4iB/bFluxvf6dYRaUceATLlmqBZ/
	AzNtZ9R3SNeQ1sW8CAf6yYXUxUWwF6XR3g78lAoy3bd1LLEFrjNkuYGNDN0hlHXOc3XroP
	Flzan1yzOqFxEqzEA2KQffHoyhi3eqpNANIvgsgF9sOAONnMKxDb7o078JnlMuwxrmKF0u
	6hCf9zFH3SkTYWqvUGfk32ngXQMWYZfbcXGsDjZU/MI/1y8anEyfhoHVR+CuNUpQnzLi0f
	68Q9S+8VmENzu8TeLlzAuXooUjoKGflyQdHL9aFjLumBVZQ9sio75CzJUaMXKA==
Received: from venus.codepro.be (venus.codepro.be [5.9.86.228])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(Client CN "mx1.codepro.be", Issuer "R3" (verified OK))
	(Authenticated sender: kp)
	by smtp.freebsd.org (Postfix) with ESMTPSA id 4B72A210FA;
	Mon, 28 Mar 2022 07:44:18 +0000 (UTC)
	(envelope-from kp@FreeBSD.org)
Received: by venus.codepro.be (Postfix, authenticated sender kp)
 id 0C5714A898;
	Mon, 28 Mar 2022 09:44:15 +0200 (CEST)
From: Kristof Provost <kp@FreeBSD.org>
To: Marcel Bischoff <marcel@herrbischoff.com>
Cc: stable@freebsd.org, freebsd-pf@freebsd.org
Subject: Re: pfctl: Cannot allocate memory.
Date: Mon, 28 Mar 2022 09:44:14 +0200
X-Mailer: MailMate (1.14r5852)
Message-ID: <BA7E1E6B-17AB-40E8-AC00-A3517AEF0AB7@FreeBSD.org>
In-Reply-To: <06EB4080-08D2-42DE-BB0D-E0C1CAE0EC2F@herrbischoff.com>
References: <06EB4080-08D2-42DE-BB0D-E0C1CAE0EC2F@herrbischoff.com>
List-Id: Technical discussion and general questions about packet filter (pf) <freebsd-pf.freebsd.org>
List-Archive: https://lists.freebsd.org/archives/freebsd-pf
List-Help: <mailto:pf+help@freebsd.org>
List-Post: <mailto:pf@freebsd.org>
List-Subscribe: <mailto:pf+subscribe@freebsd.org>
List-Unsubscribe: <mailto:pf+unsubscribe@freebsd.org>
Sender: owner-freebsd-pf@freebsd.org
X-BeenThere: freebsd-pf@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org;
	s=dkim; t=1648453458;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding:
	 in-reply-to:in-reply-to:references:references;
	bh=mJlImrBCYfdY9hIKFWLA5hfLmVgEB1OGyxOfVFZqLOI=;
	b=J8obuhAe8bYheLeBmvAhgh3BK15+z/vt7/xNKLkAl+fXJ8YbUjcHv5384Owks5I6zXWBgh
	/fnzjOu23NBbsGsKfB5vTAet7bTcsp9iHs6TlOmLxlrzrhwgAs7LISwEhQSd+LV7Ht2i50
	IKoy4Yonnx2y+Bh+66E+pi8DDNnZBcK2tMCW9ZDtryZKi9Qlz5Bg62UevqQwKI3svas9k2
	3zAVpfCkMyCDZ+fEk6Kw/ryjcUZsfIpl3HEcHfeYvdXPul7avkz0jNwgjSJjXTX7hXLW6D
	IAC7NlxzZ4FVRRjfbqLtrqPpWCuifJzQagnOVvstVM7Cjn+oJRKmET/Jaa2uNg==
ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1648453458; a=rsa-sha256; cv=none;
	b=G2RLKmo7rX3Xzh2zt4rdfEUZ0WeX4vekaet1DxU3ibSrs8mFcziYxFCb18jrkqtlSitVdM
	gvomp6Dzbj1xHBOqyK9N1Fm1J1LYXvetDDwaljoUFHwk5OSKo6L8lHvt/L5RZ8bjSSef+D
	xZt0n/JRfWooN6FGsA1eIhC+vlMXbzZNI+zIYfJJCHg+uEemV697OkJrt43nKYp96R1FOm
	IqSUHIL9imjHTTGsjXBJuJ4npHsy4q7U1s0r+jzDqeJtQdZJkUmOCC6pSKPFoLiYhJisYy
	0j+np1ee9VqBHst4Sg/KN/3+7VR2tqZcf8Y8873/tV6H+AFXuP55Pzv6vK/9eg==
ARC-Authentication-Results: i=1;
	mx1.freebsd.org;
	none
X-ThisMailContainsUnwantedMimeParts: N

On 27 Mar 2022, at 22:11, Marcel Bischoff wrote:
> Hello all,
>
> when updating a table of ~370k entries, PF sometimes refuses to do so a=
nd from then on continues to refuse until I reboot the machine.
>
> $ doas pfctl -f /etc/pf.conf
> /etc/pf.conf:27: cannot define table pfbadhost: Cannot allocate memory
> pfctl: Syntax error in config file: pf rules not loaded
>
That sounds a lot like https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D=
260406

My current theory is that this is a bug in the memory allocator somewhere=
=2E I do not have the background or time to debug that.

Kristof