>Number:         23203
>Category:       kern
>Synopsis:       sysctl_rtable can deplete the kmem_map
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Oct 20 03:51:00 UTC 2003
>Closed-Date:
>Last-Modified:
>Originator:     Jason R Thorpe
>Release:        NetBSD 1.6ZC
>Organization:
        -- Jason R. Thorpe <thorpej@shagadelic.org>
>Environment:
	
	
System: NetBSD gw-wlan.shagadelic.org 1.6ZC NetBSD 1.6ZC (SHAG-NET4501) #85: Sat Sep 27 13:26:06 PDT 2003  thorpej@yeah-baby.shagadelic.org:/u1/netbsd/src/sys/arch/i386/compile/SHAG-NET4501 i386
Architecture: i386
Machine: i386
>Description:
	I have experienced several crashes of my NetBSD-based 802.11 AP
	today.  All of them were "out of space in kmem_map" panics, and
	all of them had sysctl_rtable() in the stack trace.

	Upon looking at the code for sysctl_rtable() it does appear as
	though it will loop, allocating memory effectively without bound,
	as a temporary buffer.

>How-To-Repeat:
	Sorry, I don't have a precise set of steps for preproducing the
	problem.  This AP has been running fine for quite some time, but
	started acting up just today.

>Fix:
	Unknown.
>Release-Note:
>Audit-Trail:
>Unformatted: