https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217997
--- Comment #8 from Max <maxi...@als.nnov.ru> ---
I think the problem is in pf_create_state():
/* check maximums */
if (r->max_states &&
(counter_u64_fetch(r->states_cur) >= r->max_states)) {
counter_u64_add(V_pf_status.lcounters[LCNT_STATES], 1);
REASON_SET(&reason, PFRES_MAXSTATES);
return (PF_DROP);
}
We can't just return here. Arguably we should "goto csfailed;" instead.
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
freebsd-pf@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-pf
To unsubscribe, send any mail to "freebsd-pf-unsubscr...@freebsd.org"
