Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 26 Jan 2012 17:48:33 +0200
From:      David =?iso-8859-1?q?Sieb=F6rger?= <d.sieborger@ru.ac.za>
To:        Ermal =?iso-8859-1?q?Lu=E7i?= <eri@freebsd.org>
Cc:        freebsd-pf@freebsd.org
Subject:   Re: pf crashes in pfr_update_stats()
Message-ID:  <201201261748.33611.d.sieborger@ru.ac.za>
In-Reply-To: <CAPBZQG2uLOHBB5VJ7vv5QLhyL3B_ERFUP9a5=7vFMFgUdae3xg@mail.gmail.com>
References:  <201201261638.26599.d.sieborger@ru.ac.za> <CAPBZQG2uLOHBB5VJ7vv5QLhyL3B_ERFUP9a5=7vFMFgUdae3xg@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thursday, 26 January 2012 5:35 PM Ermal Lu=E7i wrote:
> On Thu, Jan 26, 2012 at 3:38 PM, David Sieb=F6rger=20
<d.sieborger@ru.ac.za> wrote:
> > I have a pair of FreeBSD 9.0-RELEASE firewalls which are crashing
> > repeatedly.  I've been able to connect to one of them with remote
> > kgdb after it crashed (see kgdb session attached), but I haven't
> > been able to get to the bottom of what's wrong.  Is anyone able to
> > shed more light on this?
> >=20
> > The first problem that I see is that the kt argument to
> > pfr_update_stats() is null, so the kernel panics as soon as that's
> > dereferenced.
> >=20
> > Where pfr_update_stats() is called from pf_test(), kgdb tells me
> > that "Variable "tr" is not available."  (Is that because of a gcc
> > optimisation?)  But, tr ought to equal r in this instance, and r
> > is available, so I looked at r.  r->dst.addr.p.tbl is indeed null.
>=20
> I have seen this in 8.x versions also.
> Are you doing frequent updating of tables or loading larde lists of
> addresses in them?

I started seeing something similar in 8.x, too, so I upgraded in the=20
hope that the problem would go away.

Yes, we do update the tables regularly (generally once an hour during=20
working hours, sometimes more frequently), and some of the tables are=20
large (one has 1929 entries, another 272, and there are eleven more=20
which are <=3D43).  The table that's mentioned in r->dst.addr.v.tblname=20
has 24 entries.


=2D-=20
David Sieb=F6rger
System Administrator, IT Division, Rhodes University



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201201261748.33611.d.sieborger>