Hi Stuart,
Am 25.09.23 um 19:08 schrieb Stuart Henderson:
> That might possibly be the one fixed by 7.2 errata 008, so if you don't
> already have that you at least want to syspatch.
That was my guess as well. However, the systems were patched up to 7.2
errata-016. I applied the remaining patches. So far the systems are running
stable. Are there any changes between the 7.2 and 7.3 releases that could
indicate a bug?
Many regards,
Joerg
> On 2023-09-25, Joerg Streckfuss <streckfuss@dfn-cert.de> wrote:
>> This is a cryptographically signed message in MIME format.
>>
>> --------------ms030306090501000403020005
>> Content-Type: text/plain; charset=UTF-8; format=flowed
>> Content-Transfer-Encoding: 7bit
>>
>>
>> Dear list,
>>
>> today two of our firewalls crashed. after i was able to bring the first firewall
>> back online, this one crashed again within a few minutes. this time i was able
>> to take a stack-trace from the console:
>>
>> <snip>
>> OpenBSD/amd64 (fw1) (tty00)
>>
>> login: uvm_fault(0xffffffff823237a0, 0x0, 0, 1) -> e
>> fatal page fault in supervisor mode
>> trap type 6 code 0 rip ffffffff81c38d68 cs 8 rflags 10246 cr2 0 cpl 0 rsp
>> ffff80002b853590
>> gsbase 0xffff80001d3dcff0 kgsbase 0x0
>> panic: trap type 6, code=0, pc=ffffffff81c38d68
>> Starting stack trace...
>> panic(ffffffff81f22fcf) at panic+0x12c
>> kerntrap(ffff80002b8534e0) at kerntrap+0x114
>> alltraps_kern_meltdown() at alltraps_kern_meltdown+0x7b
>> pf_state_export(fffffd80513f0bd4,fffffd877600a2a0) at pf_state_export+0x38
>> pfsync_sendout() at pfsync_sendout+0x5e4
>> pfsync_update_state(fffffd887b0ef6c0) at pfsync_update_state+0x15b
>> pf_test(18,1,ffff800002eed000,ffff80002b853a08) at pf_test+0x117a
>> ip6_input_if(ffff80002b853a08,ffff80002b853a14,29,0,ffff800002eed000) at
>> ip6_input_if+0x1ae
>> ipv6_input(ffff800002eed000,fffffd8050cb7c00) at ipv6_input+0x39
>> ether_input(ffff800002eed000,fffffd8050cb7c00) at ether_input+0x3b1
>> carp_input(ffff80000193d050,fffffd8050cb7c00,5e000102) at carp_input+0x196
>> ether_input(ffff80000193d050,fffffd8050cb7c00) at ether_input+0x1d9
>> if_input_process(ffff80000193d050,ffff80002b853be8) at if_input_process+0x6f
>> ifiq_process(ffff80000193aa00) at ifiq_process+0x69
>> taskq_thread(ffff800000037180) at taskq_thread+0x100
>> end trace frame: 0x0, count: 242
>> End of stack trace.
>> <snap>
>>
>> Both Systems are OpenBSD 7.2 running on Dell PowerEdge R740
>>
>> Is anyone able to interpret the stack trace?
>>
>> Regards,
>>
>> Joerg
>>
>> --------------ms030306090501000403020005
>> Content-Type: application/pkcs7-signature; name="smime.p7s"
>> Content-Transfer-Encoding: base64
>> Content-Disposition: attachment; filename="smime.p7s"
>> Content-Description: S/MIME Cryptographic Signature
>>
>> MIAGCSqGSIb3DQEHAqCAMIACAQExDzANBglghkgBZQMEAgEFADCABgkqhkiG9w0BBwEAAKCC
>> EP8wggUSMIID+qADAgECAgkA4wvV+K8l2YEwDQYJKoZIhvcNAQELBQAwgYIxCzAJBgNVBAYT
>> AkRFMSswKQYDVQQKDCJULVN5c3RlbXMgRW50ZXJwcmlzZSBTZXJ2aWNlcyBHbWJIMR8wHQYD
>> VQQLDBZULVN5c3RlbXMgVHJ1c3QgQ2VudGVyMSUwIwYDVQQDDBxULVRlbGVTZWMgR2xvYmFs
>> Um9vdCBDbGFzcyAyMB4XDTE2MDIyMjEzMzgyMloXDTMxMDIyMjIzNTk1OVowgZUxCzAJBgNV
>> BAYTAkRFMUUwQwYDVQQKEzxWZXJlaW4genVyIEZvZXJkZXJ1bmcgZWluZXMgRGV1dHNjaGVu
>> IEZvcnNjaHVuZ3NuZXR6ZXMgZS4gVi4xEDAOBgNVBAsTB0RGTi1QS0kxLTArBgNVBAMTJERG
>> Ti1WZXJlaW4gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgMjCCASIwDQYJKoZIhvcNAQEBBQAD
>> ggEPADCCAQoCggEBAMtg1/9moUHN0vqHl4pzq5lN6mc5WqFggEcVToyVsuXPztNXS43O+FZs
>> FVV2B+pG/cgDRWM+cNSrVICxI5y+NyipCf8FXRgPxJiZN7Mg9mZ4F4fCnQ7MSjLnFp2uDo0p
>> eQcAIFTcFV9Kltd4tjTTwXS1nem/wHdN6r1ZB+BaL2w8pQDcNb1lDY9/Mm3yWmpLYgHurDg0
>> WUU2SQXaeMpqbVvAgWsRzNI8qIv4cRrKO+KA3Ra0Z3qLNupOkSk9s1FcragMvp0049ENF4N1
>> xDkesJQLEvHVaY4l9Lg9K7/AjsMeO6W/VRCrKq4Xl14zzsjz9AkH4wKGMUZrAcUQDBHHWekC
>> AwEAAaOCAXQwggFwMA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUk+PYMiba1fFKpZFK4OpL
>> 4qIMz+EwHwYDVR0jBBgwFoAUv1kgNgB5oKAia4zV8mHSuCzLgkowEgYDVR0TAQH/BAgwBgEB
>> /wIBAjAzBgNVHSAELDAqMA8GDSsGAQQBga0hgiwBAQQwDQYLKwYBBAGBrSGCLB4wCAYGZ4EM
>> AQICMEwGA1UdHwRFMEMwQaA/oD2GO2h0dHA6Ly9wa2kwMzM2LnRlbGVzZWMuZGUvcmwvVGVs
>> ZVNlY19HbG9iYWxSb290X0NsYXNzXzIuY3JsMIGGBggrBgEFBQcBAQR6MHgwLAYIKwYBBQUH
>> MAGGIGh0dHA6Ly9vY3NwMDMzNi50ZWxlc2VjLmRlL29jc3ByMEgGCCsGAQUFBzAChjxodHRw
>> Oi8vcGtpMDMzNi50ZWxlc2VjLmRlL2NydC9UZWxlU2VjX0dsb2JhbFJvb3RfQ2xhc3NfMi5j
>> ZXIwDQYJKoZIhvcNAQELBQADggEBAIcL/z4Cm2XIVi3WO5qYi3FP2ropqiH5Ri71sqQPrhE4
>> eTizDnS6dl2e6BiClmLbTDPo3flq3zK9LExHYFV/53RrtCyD2HlrtrdNUAtmB7Xts5et6u5/
>> MOaZ/SLick0+hFvu+c+Z6n/XUjkurJgARH5pO7917tALOxrN5fcPImxHhPalR6D90Bo0fa3S
>> PXez7vTXTf/D6OWST1k+kEcQSrCFWMBvf/iu7QhCnh7U3xQuTY+8npTD5+32GPg8SecmqKc2
>> 2CzeIs2LgtjZeOJVEqM7h0S2EQvVDFKvaYwPBt/QolOLV5h7z/0HJPT8vcP9SpIClxvyt7bP
>> ZYoaorVyGTkwggWsMIIElKADAgECAgcbY7rQHiw9MA0GCSqGSIb3DQEBCwUAMIGVMQswCQYD
>> VQQGEwJERTFFMEMGA1UEChM8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hl
>> biBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLEwdERk4tUEtJMS0wKwYDVQQDEyRE
>> Rk4tVmVyZWluIENlcnRpZmljYXRpb24gQXV0aG9yaXR5IDIwHhcNMTYwNTI0MTEzODQwWhcN
>> MzEwMjIyMjM1OTU5WjCBjTELMAkGA1UEBhMCREUxRTBDBgNVBAoMPFZlcmVpbiB6dXIgRm9l
>> cmRlcnVuZyBlaW5lcyBEZXV0c2NoZW4gRm9yc2NodW5nc25ldHplcyBlLiBWLjEQMA4GA1UE
>> CwwHREZOLVBLSTElMCMGA1UEAwwcREZOLVZlcmVpbiBHbG9iYWwgSXNzdWluZyBDQTCCASIw
>> DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ07eRxH3h+Gy8Zp1xCeOdfZojDbchwFfylf
>> S2jxrRnWTOFrG7ELf6Gr4HuLi9gtzm6IOhDuV+UefwRRNuu6cG1joL6WLkDh0YNMZj0cZGnl
>> m6Stcq5oOVGHecwX064vXWNxSzl660Knl5BpBb+Q/6RAcL0D57+eGIgfn5mITQ5HjUhfZZkQ
>> 0tkqSe3BuS0dnxLLFdM/fx5ULzquk1enfnjK1UriGuXtQX1TX8izKvWKMKztFwUkP7agCwf9
>> TRqaA1KgNpzeJIdl5Of6x5ZzJBTN0OgbaJ4YWa52fvfRCng8h0uwN89Tyjo4EPPLR22MZD08
>> WkVKusqAfLjz56dMTM0CAwEAAaOCAgUwggIBMBIGA1UdEwEB/wQIMAYBAf8CAQEwDgYDVR0P
>> AQH/BAQDAgEGMCkGA1UdIAQiMCAwDQYLKwYBBAGBrSGCLB4wDwYNKwYBBAGBrSGCLAEBBDAd
>> BgNVHQ4EFgQUazqYi/nyU4na4K2yMh4JH+iqO3QwHwYDVR0jBBgwFoAUk+PYMiba1fFKpZFK
>> 4OpL4qIMz+EwgY8GA1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2NkcDEucGNhLmRmbi5kZS9n
>> bG9iYWwtcm9vdC1nMi1jYS9wdWIvY3JsL2NhY3JsLmNybDBAoD6gPIY6aHR0cDovL2NkcDIu
>> cGNhLmRmbi5kZS9nbG9iYWwtcm9vdC1nMi1jYS9wdWIvY3JsL2NhY3JsLmNybDCB3QYIKwYB
>> BQUHAQEEgdAwgc0wMwYIKwYBBQUHMAGGJ2h0dHA6Ly9vY3NwLnBjYS5kZm4uZGUvT0NTUC1T
>> ZXJ2ZXIvT0NTUDBKBggrBgEFBQcwAoY+aHR0cDovL2NkcDEucGNhLmRmbi5kZS9nbG9iYWwt
>> cm9vdC1nMi1jYS9wdWIvY2FjZXJ0L2NhY2VydC5jcnQwSgYIKwYBBQUHMAKGPmh0dHA6Ly9j
>> ZHAyLnBjYS5kZm4uZGUvZ2xvYmFsLXJvb3QtZzItY2EvcHViL2NhY2VydC9jYWNlcnQuY3J0
>> MA0GCSqGSIb3DQEBCwUAA4IBAQCBeEWkTqR/DlXwCbFqPnjMaDWpHPOVnj/z+N9rOHeJLI21
>> rT7H8pTNoAauusyosa0zCLYkhmI2THhuUPDVbmCNT1IxQ5dGdfBi5G5mUcFCMWdQ5UnnOR7L
>> n8qGSN4IFP8VSytmm6A4nwDO/afr0X9XLchMX9wQEZc+lgQCXISoKTlslPwQkgZ7nu7YRrQb
>> tQMMONncsKk/cQYLsgMHM8KNSGMlJTx6e1du94oFOO+4oK4v9NsH1VuEGMGpuEvObJAaguS5
>> Pfp38dIfMwK/U+d2+dwmJUFvL6Yb+qQTkPp8ftkLYF3sv8pBoGH7EUkp2KgtdRXYShjqFu9V
>> NCIaE40GMIIGNTCCBR2gAwIBAgIMJ52a5xAjJ0OdQ09yMA0GCSqGSIb3DQEBCwUAMIGNMQsw
>> CQYDVQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRz
>> Y2hlbiBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQD
>> DBxERk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBMB4XDTIyMTEyMzEzMTcxNFoXDTI1MTEy
>> MjEzMTcxNFowgc8xCzAJBgNVBAYTAkRFMRAwDgYDVQQIDAdIYW1idXJnMRAwDgYDVQQHDAdI
>> YW1idXJnMR8wHQYDVQQKDBZERk4tQ0VSVCBTZXJ2aWNlcyBHbWJIMRQwEgYDVQQLDAtJVCBT
>> ZXJ2aWNlczETMBEGA1UEBAwKU3RyZWNrZnVzczEOMAwGA1UEKgwFSm9lcmcxGTAXBgNVBAMM
>> EEpvZXJnIFN0cmVja2Z1c3MxJTAjBgkqhkiG9w0BCQEWFnN0cmVja2Z1c3NAZGZuLWNlcnQu
>> ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2NQZPyyyIOntPfuThFNEws1zp
>> pfDgNEVRlFznplGi4JYl8D6AJxBRNZHpqFg8r7CT/6E9SkcJ0WK7/BTBJPJNvhWJHu6enr0D
>> gEbBmNna1k848lCf7t6e2EzcoPAbExr2F3qWaNdTU+BEYIsrQIDo4FLoIe2pA5ACDzZH+jsm
>> JAotJqaeuINwl9AB3Sjy9QLIrIZOh7bhPu5WcCPqlK+KBQHXvLTzQx+BS/iYqJocBg8NiKVy
>> F3Q7BuYgdyppaQ1gWCZJ7hLiHqcNZwQEp0YdjhomMRtBRQpwfDmVzZ1HaB4esIXc0USB+zOg
>> gmCgNAxzffMQMCLpR8mFfPKRmgLJAgMBAAGjggJPMIICSzA+BgNVHSAENzA1MA8GDSsGAQQB
>> ga0hgiwBAQQwEAYOKwYBBAGBrSGCLAEBBAswEAYOKwYBBAGBrSGCLAIBBAswCQYDVR0TBAIw
>> ADAOBgNVHQ8BAf8EBAMCBeAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMB0GA1Ud
>> DgQWBBQsT7CTlUVAvEBwedjjUHq9zZiuEDAfBgNVHSMEGDAWgBRrOpiL+fJTidrgrbIyHgkf
>> 6Ko7dDAhBgNVHREEGjAYgRZzdHJlY2tmdXNzQGRmbi1jZXJ0LmRlMIGNBgNVHR8EgYUwgYIw
>> P6A9oDuGOWh0dHA6Ly9jZHAxLnBjYS5kZm4uZGUvZGZuLWNhLWdsb2JhbC1nMi9wdWIvY3Js
>> L2NhY3JsLmNybDA/oD2gO4Y5aHR0cDovL2NkcDIucGNhLmRmbi5kZS9kZm4tY2EtZ2xvYmFs
>> LWcyL3B1Yi9jcmwvY2FjcmwuY3JsMIHbBggrBgEFBQcBAQSBzjCByzAzBggrBgEFBQcwAYYn
>> aHR0cDovL29jc3AucGNhLmRmbi5kZS9PQ1NQLVNlcnZlci9PQ1NQMEkGCCsGAQUFBzAChj1o
>> dHRwOi8vY2RwMS5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9iYWwtZzIvcHViL2NhY2VydC9jYWNl
>> cnQuY3J0MEkGCCsGAQUFBzAChj1odHRwOi8vY2RwMi5wY2EuZGZuLmRlL2Rmbi1jYS1nbG9i
>> YWwtZzIvcHViL2NhY2VydC9jYWNlcnQuY3J0MA0GCSqGSIb3DQEBCwUAA4IBAQBMuIvKaFUv
>> wc1yZVuwSulMhw9ZFVG7Zm4/lo/uHbRaciNebwk/0OYIS6LiYkducsqC+xbRjvzNcQIRqt7d
>> wwnIEN9SI2wcw3S57vxXgIx6QsHCpRkNtXpdWkc5bV1HzWpDqqxfApU4nGPiPpyHFr1oETC/
>> TFZzt8AYFV8NXROLEKBelWqkru+v317AFdWkHr+CYnd8lh03UeeTSA+qOU/hxwgo27OZEemH
>> SXVr3xek5DyPMKXDn0EcvbFpfZWgpAf8r7W1sJ3WJboUmp8fQtTJ3aX83PfpvsyWiacPYJAu
>> Stw/+/sbKkS4kliwk9TJSNvfruMZRh5qcbY2TMNfBpkRMYIECzCCBAcCAQEwgZ4wgY0xCzAJ
>> BgNVBAYTAkRFMUUwQwYDVQQKDDxWZXJlaW4genVyIEZvZXJkZXJ1bmcgZWluZXMgRGV1dHNj
>> aGVuIEZvcnNjaHVuZ3NuZXR6ZXMgZS4gVi4xEDAOBgNVBAsMB0RGTi1QS0kxJTAjBgNVBAMM
>> HERGTi1WZXJlaW4gR2xvYmFsIElzc3VpbmcgQ0ECDCedmucQIydDnUNPcjANBglghkgBZQME
>> AgEFAKCCAj0wGAYJKoZIhvcNAQkDMQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMjMw
>> OTI1MTUwODIxWjAvBgkqhkiG9w0BCQQxIgQgSx6nNxlhGSDFkjE1BUskkGxRU1yO48bQM2wm
>> WBghuBYwbAYJKoZIhvcNAQkPMV8wXTALBglghkgBZQMEASowCwYJYIZIAWUDBAECMAoGCCqG
>> SIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG
>> 9w0DAgIBKDCBrwYJKwYBBAGCNxAEMYGhMIGeMIGNMQswCQYDVQQGEwJERTFFMEMGA1UECgw8
>> VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hlbiBGb3JzY2h1bmdzbmV0emVz
>> IGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQDDBxERk4tVmVyZWluIEdsb2JhbCBJ
>> c3N1aW5nIENBAgwnnZrnECMnQ51DT3IwgbEGCyqGSIb3DQEJEAILMYGhoIGeMIGNMQswCQYD
>> VQQGEwJERTFFMEMGA1UECgw8VmVyZWluIHp1ciBGb2VyZGVydW5nIGVpbmVzIERldXRzY2hl
>> biBGb3JzY2h1bmdzbmV0emVzIGUuIFYuMRAwDgYDVQQLDAdERk4tUEtJMSUwIwYDVQQDDBxE
>> Rk4tVmVyZWluIEdsb2JhbCBJc3N1aW5nIENBAgwnnZrnECMnQ51DT3IwDQYJKoZIhvcNAQEB
>> BQAEggEAngrtKYqDk9VGutI0Be1kHi6G9GH+vR+pLqVp3xT70LpRzrPnd1/p8pAc55WX1a9n
>> 80exUjOU4VfZnQ9aWofRyxFz9z2dfjdfTxRd0z60h9e8UhFwUYVruvcoAyoOTp3eL5YM7HuN
>> 4aKh8sPads6pQcZphVDD87Ih8sCWjsJP4M1/dBFg+l0lLDCKBUWjzjaUnr3xFAdWZHQWaoF+
>> rAkfvAp64BNYiRoojS5Zk9fJbWzKudk1L07JlDlF6DTAFuXKX9ypMEdASDzS+jTpySAfkWGt
>> FivTnMHH4cBrTUVQ9+yPKBds3thAEbzKkcq+B3YMmDCgFGzf7SxUDRiBjgH1KQAAAAAAAA==
>> --------------ms030306090501000403020005--
>>
>>
>
>
--
Dipl.-Ing. (FH) Joerg Streckfuss M.Sc. (Senior IT-Specialist)
DFN-CERT Services GmbH, https://www.dfn-cert.de/, Phone +49 40 808077-555
Sitz / Register: Hamburg, AG Hamburg, HRB 88805, Ust-IdNr.: DE 232129737
Nagelsweg 41, 20097 Hamburg, Germany. CEO: Dr. Klaus-Peter Kossakowski
No comments:
Post a Comment