> What about the other calls to calloc(3); shouldn't we keep their > respective error messages consistent?
seems that several err()/errx() calls in pfctl code are hard-coding the function name... instead of hard code, maybe those calls should be changed to: errx(1, "%s: anystring", __func__)