Page MenuHomeFreeBSD

pf: Free pf_rule_items when state is not created
ClosedPublic

Authored by vegeta_tuxpowered.net on Oct 12 2023, 4:20 PM.
Tags
None
Referenced Files
Unknown Object (File)
Thu, Sep 12, 7:36 AM
Unknown Object (File)
Sun, Sep 8, 10:54 AM
Unknown Object (File)
Sat, Sep 7, 12:24 PM
Unknown Object (File)
Thu, Sep 5, 2:49 AM
Unknown Object (File)
Mon, Sep 2, 2:26 PM
Unknown Object (File)
Tue, Aug 27, 1:28 AM
Unknown Object (File)
Aug 19 2024, 10:41 AM
Unknown Object (File)
Aug 8 2024, 8:31 PM

Details

Summary

This addresses the issues of pf_rule_times leaking in case of stateless rules and in case of state creation failures, like hitting the state limit.

Sponsored by: InnoGames GmbH

Test Plan

I've created a rulesets with a match rule and with a pass rule with state limit or with no state. After sending a few packets through I've unloaded pf.ko and that resulted with memory leak being logged. With this patch the leak is not logged anymore.

Diff Detail

Repository
rG FreeBSD src repository
Lint
Lint Skipped
Unit
Tests Skipped