Subject: kern/26349: ipfilter bug
To: None <gnats-bugs@gnats.NetBSD.org>
From: None <carton@Ivy.NET>
List: netbsd-bugs
Date: 07/17/2004 04:18:40
>Number:         26349
>Category:       kern
>Synopsis:       use of ipfilter 'dup-to' clause panics kernel
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sat Jul 17 04:47:00 UTC 2004
>Closed-Date:
>Last-Modified:
>Originator:     Miles Nordin
>Release:        NetBSD 1.6ZG (current-20031212)
>Organization:
Ivy Ministries
>Environment:
	
	
System: NetBSD ezln 1.6ZG NetBSD 1.6ZG (EZLN) #0: Fri Feb 13 01:25:22 EST 2004 carton@castrovalva:/scratch/src/sys/arch/alpha/compile/EZLN alpha
Architecture: alpha
Machine: alpha
>Description:
When i reload an ipf.conf with

	#pass in on tlp1 dup-to vlan2 from any to any
	#pass out on tlp1 dup-to vlan2 from any to any

kernel panics with
	panic: m_copym: m == 0 and not COPYALL

>How-To-Repeat:
1. boot machine
2. load ipf.conf
3. add dup-to lines above to ipf.conf
4. reload ipf.conf
>Fix:
might be fixed already in new ipfilter, or in pf.  needs testing.

>Release-Note:
>Audit-Trail:
>Unformatted: