From nobody Mon Mar 28 22:10:54 2022 X-Original-To: freebsd-pf@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 3EC001A32552; Mon, 28 Mar 2022 22:12:09 +0000 (UTC) (envelope-from doctor@doctor.nl2k.ab.ca) Received: from doctor.nl2k.ab.ca (doctor.nl2k.ab.ca [204.209.81.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4KS6PN13FPz4TJf; Mon, 28 Mar 2022 22:12:07 +0000 (UTC) (envelope-from doctor@doctor.nl2k.ab.ca) Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD)) (envelope-from ) id 1nYxZe-0008Ad-TN; Mon, 28 Mar 2022 16:10:54 -0600 Date: Mon, 28 Mar 2022 16:10:54 -0600 From: The Doctor To: Kristof Provost Cc: Marcel Bischoff , stable@freebsd.org, freebsd-pf@freebsd.org Subject: Re: pfctl: Cannot allocate memory. Message-ID: References: <06EB4080-08D2-42DE-BB0D-E0C1CAE0EC2F@herrbischoff.com> <8BBDA16D-207B-4704-86F5-F75F2A44AD7B@herrbischoff.com> <9184152E-52BF-460A-97C1-CA10E2FDCE03@FreeBSD.org> List-Id: Technical discussion and general questions about packet filter (pf) List-Archive: https://lists.freebsd.org/archives/freebsd-pf List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-pf@freebsd.org X-BeenThere: freebsd-pf@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <9184152E-52BF-460A-97C1-CA10E2FDCE03@FreeBSD.org> X-Rspamd-Queue-Id: 4KS6PN13FPz4TJf X-Spamd-Bar: - Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=pass (policy=quarantine) header.from=nl2k.ab.ca; spf=pass (mx1.freebsd.org: domain of doctor@doctor.nl2k.ab.ca designates 204.209.81.1 as permitted sender) smtp.mailfrom=doctor@doctor.nl2k.ab.ca X-Spamd-Result: default: False [-1.80 / 15.00]; INTRODUCTION(2.00)[]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; RCPT_COUNT_THREE(0.00)[4]; TO_DN_SOME(0.00)[]; R_SPF_ALLOW(-0.20)[+a]; FROM_HAS_DN(0.00)[]; MIME_GOOD(-0.10)[text/plain]; RCVD_TLS_LAST(0.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; TO_MATCH_ENVRCPT_SOME(0.00)[]; NEURAL_HAM_SHORT(-1.00)[-1.000]; DMARC_POLICY_ALLOW(-0.50)[nl2k.ab.ca,quarantine]; MLMMJ_DEST(0.00)[stable,freebsd-pf]; FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_TWO(0.00)[2]; ASN(0.00)[asn:6171, ipnet:204.209.81.0/24, country:CA]; MID_RHS_MATCH_FROM(0.00)[] X-ThisMailContainsUnwantedMimeParts: N On Mon, Mar 28, 2022 at 04:13:30PM +0200, Kristof Provost wrote: > On 28 Mar 2022, at 14:14, Marcel Bischoff wrote: > >> On 28. Mar 2022, at 09:44, Kristof Provost wrote: > >> > >> On 27 Mar 2022, at 22:11, Marcel Bischoff wrote: > >>> Hello all, > >>> > >>> when updating a table of ~370k entries, PF sometimes refuses to do so and from then on continues to refuse until I reboot the machine. > >>> > >>> $ doas pfctl -f /etc/pf.conf > >>> /etc/pf.conf:27: cannot define table pfbadhost: Cannot allocate memory > >>> pfctl: Syntax error in config file: pf rules not loaded > >>> > >> That sounds a lot like https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=260406 > >> > >> My current theory is that this is a bug in the memory allocator somewhere. I do not have the background or time to debug that. > > > > Thanks for your reply Kristof. I concur, it indeed looks a lot like the bug ticket you linked. I could spare the time but I don't have the background or capability to debug this myself. Is there anything I could do to help move this issue along? > > > Short of studying the memory allocation code and finding the bug, no. > > Kristof > Best do a shotdown / restart. -- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising! Look at Psalms 14 and 53 on Atheism https://www.empire.kred/ROOTNK?t=94a1f39b One cannot abide in truth while spinning falsehoods. -unknown Beware https://mindspring.com