Re: panic: m_copm, length > size of mbuf chain

From: Max Laier <max_at_love2party.net>
Date: Wed, 28 Jan 2004 21:35:09 +0100
On Monday 26 January 2004 14:21, Andre Oppermann wrote:
> sebastian ssmoller wrote:
> > hi,
> > my system ran stable for several days now but suddenly this error
> > occured. At this moment i did nothing special - just surfing the net
> > ...
> >
> > cause i have no serial line attached i could only get the following
> > infos: Debugger(...) at Debugger+0x54
> > panic(...) at panic+0xd5
> > m_copym(...)
> > ip_fragment(...)
> > ip_output(...)
> > ip_forward(...)
> >
> > i didnt want to write down all these numbers(addresses) by hand,
> > should i ?
> >
> > it seems to have to do something with inet/ip so i possibly should
> > mention that i disabled "option inet6" in kernel and that i use "pf"
> > as packet filter.
> >
> > $ uname -a
> > FreeBSD tyrael.linnet 5.2-CURRENT FreeBSD 5.2-CURRENT #2: Mon Jan 19
> > 22:26:43 CET 2004    
> > root_at_tyrael.linnet:/usr/obj/usr/src-current/sys/DEBUG  i386
> >
> > i can provide more info if needed...
>
> This looks like a host/network byte order problem in relation with the
> 'pf' packet filter.  ip_output() expects the ip_off field to be in host
> byte order.  If this is not the case you will get bogus length values
> for fragmentation.

Anybody else seeing this?

Can you please try attached patch against pf_ioctl.c (for convenience just 
to throw into security/pf/files) and report success/failure.

-- 
Best regards,				| max_at_love2party.net
Max Laier				| ICQ #67774661
http://pf4freebsd.love2party.net/	| mlaier_at_EFnet

Received on Wed Jan 28 2004 - 11:35:19 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:40 UTC