cvs commit: src/sys/netipsec ipsec.c key.c

Mike Tancsa mike at sentex.net
Sun Jul 13 18:37:52 PDT 2003


Hi all, I have been seeing memory allocation errors on a few FreeBSD boxes 
running IPSEC. Does anyone know if the commit below addresses such a 
problem ? Or is this a racoon issue ?  I did a search on google and have 
not seen anyone else mention this particular issue.

Jul 14 00:57:57 d1terA9 racoon: ERROR: pfkey.c:210:pfkey_handler():
pfkey ADD failed: Cannot allocate memory

The code appears to be

         /* validity check */
         if (msg->sadb_msg_errno) {
                 int pri;

                 /* when SPD is empty, treat the state as no error. */
                 if (msg->sadb_msg_type == SADB_X_SPDDUMP &&
                     msg->sadb_msg_errno == ENOENT)
                         pri = LLV_DEBUG;
                 else
                         pri = LLV_ERROR;

                 plog(pri, LOCATION, NULL,
                         "pfkey %s failed: %s\n",
                         s_pfkey_type(msg->sadb_msg_type),
                         strerror(msg->sadb_msg_errno));

                 goto end;
         }

         ---Mike

At 06:38 PM 30/06/2003 -0700, Sam Leffler wrote:
>sam         2003/06/30 18:38:13 PDT
>
>   FreeBSD src repository
>
>   Modified files:        (Branch: RELENG_4)
>     sys/netipsec         ipsec.c key.c
>   Log:
>   MFC: plug xform memory leaks
>
>   Revision  Changes    Path
>   1.2.2.2   +2 -0      src/sys/netipsec/ipsec.c
>   1.3.2.2   +13 -2     src/sys/netipsec/key.c
>_______________________________________________
>cvs-all at freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/cvs-all
>To unsubscribe, send any mail to "cvs-all-unsubscribe at freebsd.org"



More information about the freebsd-stable mailing list