From nobody Mon Aug 3 15:04:05 2026 X-Original-To: pf@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4hDKh64nZQz6mJng for ; Mon, 03 Aug 2026 15:04:06 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4hDKh62P5Cz45Z8 for ; Mon, 03 Aug 2026 15:04:06 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785769446; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=IJJKxkPslsPil2b2yBwRD+ApR1R9lvFYDqIk75/9xrI=; b=oUoA0IV4BfY8hjEzc79Flt0ntN/iWAr99cpC029wFlnXMZORCG3+uI/HpGd3vX5r9TS6gt 6eH9dBUg10fTR5Pco+UK+/zmyRtLalEwpZIzoS7lyqc8uA6GKm6jMswQumugw9deH/YR4j dWFqBBLM/K1ZrLjAdIjAG8acseKM8xDbJY1BJh149bnrybMAHPPwLmFN6fIOIYFbdPAm97 1hsVxp4/KzgPrxUT8ofL9LQCR0h40fHrGt5QdCvt5mvY+vpJ6IsNom9+ZmdxP2VitNTdHs +PwxRQHHVzKgjB1cDZ0f675+zrtrCJKpXQNeOxw2sOzys8V1oe5D7gLzNqQBIQ== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1785769446; a=rsa-sha256; cv=none; b=Zl0XIwxeJ2jkrhJx9HnmkcE4Gtm3G0Skw2VBvMa3gEZU7VfaZcV11tpZAaIodMGLmYfMc9 xfyKurf/tuz34ibJemC+J91d6Lj+0F0LkZhaYLAE/dC/+1CDKAOidLUIM+ECmvcQtUyKpX QWViie/g4b9JMz5JUZxecEiotOtCCtC32d1fr3HkT/jbJ6SLPIfK2tMKOZ6PqqfVZkaNe5 hwGr8CnUgF/GiuKUQg0MsQEyNT9qiBjgqEKOsWF/vMPtJK8rq0OC8QM4eDjPX60AAwfL2c jkp1ZXTkKaabL30+f9xCYBjfUTFHTU2CGeUjZYT0ohfjE5VY3odPGEqtHgua2Q== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785769446; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=IJJKxkPslsPil2b2yBwRD+ApR1R9lvFYDqIk75/9xrI=; b=u1x1jPFyo25dtvXMZTXH1hC7rngF6Mac8XtCpQehaC/x60/wOkBq3/UZh7ndxo9vWSzPFQ AJc/TWr+NBzqxJ/cbg4pcWerVI+BywSgFVU7KHbBYp07bJFWYzsM4VnOWm+FYKE848LyT/ 6S9t1JQS5rddRE0aIHm/Xxm4Qc9rTpl9MdZGGiM2CS4yueWcUwEB5Eb73dWKB6ax18DHCN ITMa9BWXnoykpug/PwcbX6Ax9GMO3ay3RG+AdKMUjsoLAlTszH+Mglu5E1uaI9oyCysH2R iidiObLGhtrbYuErpAbi39JPAJXN5fezKTgPj4uUqxTtI4wZtLmEF15+8f77Dg== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4hDKh61PC1z14yt for ; Mon, 03 Aug 2026 15:04:06 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 673F46e5079870 for ; Mon, 3 Aug 2026 15:04:06 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from www@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 673F463v079869 for pf@FreeBSD.org; Mon, 3 Aug 2026 15:04:06 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: www set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: pf@FreeBSD.org Subject: [Bug 290811] pf panic on kldload Date: Mon, 03 Aug 2026 15:04:05 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.0-STABLE X-Bugzilla-Keywords: crash X-Bugzilla-Severity: Affects Only Me X-Bugzilla-Who: linimon@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: pf@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: attachments.mimetype Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Technical discussion and general questions about packet filter (pf) List-Archive: https://lists.freebsd.org/archives/freebsd-pf List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-pf@freebsd.org Sender: owner-freebsd-pf@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D290811 Mark Linimon changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #265179|application/x-troff-man |text/plain mime type| | --=20 You are receiving this mail because: You are the assignee for the bug.= From nobody Mon Aug 3 16:02:44 2026 X-Original-To: pf@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4hDLzn29zwz6mR6K for ; Mon, 03 Aug 2026 16:02:45 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "YR1" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 4hDLzm5vBCz3Q6d for ; Mon, 03 Aug 2026 16:02:44 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785772964; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=B1qWhRAAo5DtHyDCrYkwiD/d/p5ktp2WekjLqpW+aI8=; b=uf3IqCeMLZk47d5S/WihQ4ErOIC2kasrj+E6GFrz9TOJmyae0HG76MX+XGl15xR2GNzKsA 8sgVTJcZfdvR02eFcEjPPcxJ8UxrDlRk0kN3JZN4n3DYXQZfdohYJI6LoZ58zmC7IELErl HtfnmRIts/mzfpf36h98ut+X2C8Z5Ny5M9VNdiG3rrejA3J5Gh1n1GxaSRysPR5aY2NHAo Y5MUTVl67Jht+90ELvCU18EGO96/easabboIeLinhFRXNMulv7nHm6NL3GuZ1gk/XYHyIN tHy9G8YQBXERUXrPhDRlsanAZFx4cWUjv/PeBgBdfpTzcfq6J7CSD8iBeDtBAA== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1785772964; a=rsa-sha256; cv=none; b=hlL0sTN3MEP+zCmu7RHvBOoxT9SRc8zn6GgGWe0kpjYHUDZLoISjcrTGCk4DgUTSc7jn7E RNnoLYBFTFVj3tnBQRCU+DTOjIaPeDOJUuFuHp49yTjX93GgQVmc4kc2cYujKzuHaQKyo0 3Nsr30/B0bypt7+i8M0snJ7Bg61gNgr8e5ivN9vkdjwKiL5kHS3lj7pON9zPP6hKEBm0bc OM2MsUOsSEVo6q0iaPMp7by+nteY3NkbjwJ7w4TkjBhwaNfHsGyBPc7JBuEjSaroyYsnwy Dk9ZGiBbVfjQpP5bShxS+hz2fyhAnxDDZAnx7N6yEeQ8asrMGYzC6oRn8eeYNg== ARC-Authentication-Results: i=1; mx1.freebsd.org; none ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1785772964; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=B1qWhRAAo5DtHyDCrYkwiD/d/p5ktp2WekjLqpW+aI8=; b=vOzDpCbKMtvclnoPOasCHfCzBmFoBJR5wGG+tqZDbAgRtlbeNT9uDaQdBlKMjAPRWi/3Ks SW+bSYBTslegmUwI22JWPlko/ZBBaTIIhK00m9yIpvkZ0tCPoZbi2n5/9E0fm84oicfsp/ K0GlxN+fCfQUyye8QQFWZ+1TT6/Yl4hykVgNUl37+05Do4m/6JvwTFdT9y3Bp+QdtS/ch/ g5VeQPR+jmpqmfmo52FLrWSxSI4M9DcnLUb1QHpCoo1lC5xTcRK/eTRoa1UXcxQglXoNJR Vk/3rHmjXqT2Ue5/anLsN0thCz4O/mGmpS35YaqTIHO5RQqcx+TvrMv4UWIe7A== Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4hDLzm4zK5z178d for ; Mon, 03 Aug 2026 16:02:44 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 673G2iOp069931 for ; Mon, 3 Aug 2026 16:02:44 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from bugzilla@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 673G2iI4069930 for pf@FreeBSD.org; Mon, 3 Aug 2026 16:02:44 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: bugzilla set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: pf@FreeBSD.org Subject: [Bug 296838] pf: cannot reload ruleset in securelevel 2 Date: Mon, 03 Aug 2026 16:02:44 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: 15.1-RELEASE X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Many People X-Bugzilla-Who: commit-hook@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: pf@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="UTF-8" X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Technical discussion and general questions about packet filter (pf) List-Archive: https://lists.freebsd.org/archives/freebsd-pf List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-pf@freebsd.org Sender: owner-freebsd-pf@FreeBSD.org List-Id: List-Post: List-Help: List-Subscribe: List-Unsubscribe: List-Owner: Precedence: list MIME-Version: 1.0 https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D296838 --- Comment #10 from commit-hook@FreeBSD.org --- A commit in branch main references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=3Dd13dffa150d17dc239e164ea42ddab91e= 6fab466 commit d13dffa150d17dc239e164ea42ddab91e6fab466 Author: Kristof Provost AuthorDate: 2026-07-21 13:03:24 +0000 Commit: Kristof Provost CommitDate: 2026-08-03 16:00:04 +0000 pf: fix securelevel off-by-one cmd_securelevel is the securelevel at which the call should be denied. pf (write) calls should be denied at level 3 or up (not at 2 or up as it was), so increment these all by one. PR: 296838 MFC after: 4 weeks Sponsored by: Rubicon Communications, LLC ("Netgate") Differential Revision: https://reviews.freebsd.org/D58377 sys/netpfil/pf/pf_nl.c | 94 +++++++++++++++++++++++++---------------------= ---- 1 file changed, 47 insertions(+), 47 deletions(-) --=20 You are receiving this mail because: You are the assignee for the bug.=