Hi Stuart,
Am 25.09.23 um 19:08 schrieb Stuart Henderson:
That might possibly be the one fixed by 7.2 errata 008, so if you don't
already have that you at least want to syspatch.
That was my guess as well. However, the systems were patched up to 7.2
errata-016. I applied the remaining patches. So far the systems are running
stable. Are there any changes between the 7.2 and 7.3 releases that could
indicate a bug?
Many regards,
Joerg
On 2023-09-25, Joerg Streckfuss <streckf...@dfn-cert.de> wrote:
This is a cryptographically signed message in MIME format.
--------------ms030306090501000403020005
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Dear list,
today two of our firewalls crashed. after i was able to bring the first firewall
back online, this one crashed again within a few minutes. this time i was able
to take a stack-trace from the console:
<snip>
OpenBSD/amd64 (fw1) (tty00)
login: uvm_fault(0xffffffff823237a0, 0x0, 0, 1) -> e
fatal page fault in supervisor mode
trap type 6 code 0 rip ffffffff81c38d68 cs 8 rflags 10246 cr2 0 cpl 0 rsp
ffff80002b853590
gsbase 0xffff80001d3dcff0 kgsbase 0x0
panic: trap type 6, code=0, pc=ffffffff81c38d68
Starting stack trace...
panic(ffffffff81f22fcf) at panic+0x12c
kerntrap(ffff80002b8534e0) at kerntrap+0x114
alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
pf_state_export(fffffd80513f0bd4,fffffd877600a2a0) at pf_state_export+0x38
pfsync_sendout() at pfsync_sendout+0x5e4
pfsync_update_state(fffffd887b0ef6c0) at pfsync_update_state+0x15b
pf_test(18,1,ffff800002eed000,ffff80002b853a08) at pf_test+0x117a
ip6_input_if(ffff80002b853a08,ffff80002b853a14,29,0,ffff800002eed000) at
ip6_input_if+0x1ae
ipv6_input(ffff800002eed000,fffffd8050cb7c00) at ipv6_input+0x39
ether_input(ffff800002eed000,fffffd8050cb7c00) at ether_input+0x3b1
carp_input(ffff80000193d050,fffffd8050cb7c00,5e000102) at carp_input+0x196
ether_input(ffff80000193d050,fffffd8050cb7c00) at ether_input+0x1d9
if_input_process(ffff80000193d050,ffff80002b853be8) at if_input_process+0x6f
ifiq_process(ffff80000193aa00) at ifiq_process+0x69
taskq_thread(ffff800000037180) at taskq_thread+0x100
end trace frame: 0x0, count: 242
End of stack trace.
<snap>
Both Systems are OpenBSD 7.2 running on Dell PowerEdge R740
Is anyone able to interpret the stack trace?
Regards,
Joerg
--------------ms030306090501000403020005
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature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==
--------------ms030306090501000403020005--
--
Dipl.-Ing. (FH) Joerg Streckfuss M.Sc. (Senior IT-Specialist)
DFN-CERT Services GmbH, https://www.dfn-cert.de/, Phone +49 40 808077-555
Sitz / Register: Hamburg, AG Hamburg, HRB 88805, Ust-IdNr.: DE 232129737
Nagelsweg 41, 20097 Hamburg, Germany. CEO: Dr. Klaus-Peter Kossakowski
