[Bug 277093] pf: Assertion failed: (elems <= maxelems), function pf_nvuint_32_array on stable/14 with RACK

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=277093

eborisch+FreeBSD@gmail.com changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |eborisch+FreeBSD@gmail.com

--- Comment #4 from eborisch+FreeBSD@gmail.com ---
Seeing this on 14.1-p1 (running inside a bhyve VM hosted on 14.0-p7, FWIW)

With freshly removed/installed libpfctl+pftop packages from latest:

Assertion failed: (elems <= maxelems), function pf_nvuint_32_array, file
libpfctl.c, line 153.

Looking at the core dump:
(lldb) bt
* thread #1, name = 'pftop', stop reason = signal SIGABRT
  * frame #0: 0x00002a9ebc67b10a libc.so.7`__sys_thr_kill + 10
    frame #1: 0x00002a9ebc5f4404 libc.so.7`__raise + 52
    frame #2: 0x00002a9ebc6a79d9 libc.so.7`abort + 73
    frame #3: 0x00002a9ebc5d75f1 libc.so.7`__assert + 81
    frame #4: 0x00002a9ebb317189 libpfctl.so.0`pfctl_get_clear_rule + 3113
    frame #5: 0x00002a9ebb31654e libpfctl.so.0`pfctl_get_rule + 14
    frame #6: 0x00002a96985ba7f3 pftop`___lldb_unnamed_symbol217 + 291
    frame #7: 0x00002a96985ba9fe pftop`___lldb_unnamed_symbol220 + 190
    frame #8: 0x00002a96985b983a pftop`___lldb_unnamed_symbol202 + 106
    frame #9: 0x00002a96985bf2ea pftop`___lldb_unnamed_symbol300 + 90
    frame #10: 0x00002a96985bc1a8 pftop`___lldb_unnamed_symbol233 + 1176
    frame #11: 0x00002a9ebc5c8a6a libc.so.7`__libc_start1 + 298
    frame #12: 0x00002a96985b87ed pftop`___lldb_unnamed_symbol182 + 45


If I locally recompile / reinstall libpfctl+pftop with symbols, I get a
different error:


* thread #1, name = 'pftop', stop reason = signal SIGSEGV: address not mapped
to object (fault address: 0x2d3)
    frame #0: 0x00002a6604b13f36 libc.so.7`strcasecmp_l + 118
libc.so.7`strcasecmp_l:
->  0x2a6604b13f36 <+118>: movzbl (%rax,%r13), %r12d
    0x2a6604b13f3b <+123>: movq   %rbx, %rdi
    0x2a6604b13f3e <+126>: leaq   -0x34(%rbp), %rsi
    0x2a6604b13f42 <+130>: callq  0x2a6604b18550 ; symbol stub for:
__runes_for_locale
(lldb) bt
* thread #1, name = 'pftop', stop reason = signal SIGSEGV: address not mapped
to object (fault address: 0x2d3)
  * frame #0: 0x00002a6604b13f36 libc.so.7`strcasecmp_l + 118
    frame #1: 0x00002a6604aaffd6 libc.so.7`bsearch + 70
    frame #2: 0x00002a6604a384b0 libc.so.7`_nsdispatch + 1200
    frame #3: 0x00002a6604a316f6 libc.so.7`getprotobynumber + 118
    frame #4: 0x00002a5de143276c pftop`print_rule(pr=0x000045b37d7ab040) at
pftop.c:1440:24
    frame #5: 0x00002a5de142ff53 pftop`print_rules at pftop.c:1573:3
    frame #6: 0x00002a5de1437e8c pftop`disp_update at engine.c:883:4
    frame #7: 0x00002a5de14389eb pftop`engine_loop(countmax=0) at
engine.c:1213:4
    frame #8: 0x00002a5de1434929 pftop`main(argc=0, argv=0x00002a660178cb40) at
pftop.c:2322:2
    frame #9: 0x00002a66049d0a6a libc.so.7`__libc_start1 + 298
    frame #10: 0x00002a5de142ee5d pftop`_start at crt1_s.S:83
(lldb) fr sel 4
frame #4: 0x00002a5de143276c pftop`print_rule(pr=0x000045b37d7ab040) at
pftop.c:1440:24
   1437         else print_fld_str(FLD_ACTION, actiontypes[pr->action]);
   1438
   1439         if (pr->proto) {
-> 1440                 struct protoent *p = getprotobynumber(pr->proto);
   1441
   1442                 if (p != NULL)
   1443                         print_fld_str(FLD_PROTO, p->p_name);
(lldb) print pr->proto
(uint8_t) '\x11'

-- 
You are receiving this mail because:
You are the assignee for the bug.