From owner-freebsd-current@FreeBSD.ORG  Tue Jul 23 07:32:04 2013
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx2.freebsd.org (mx2.freebsd.org
 [IPv6:2001:1900:2254:206a::19:2])
 by hub.freebsd.org (Postfix) with ESMTP id A3E3B159;
 Tue, 23 Jul 2013 07:32:04 +0000 (UTC) (envelope-from ae@FreeBSD.org)
Received: from butcher-nb.yandex.net (hub.freebsd.org
 [IPv6:2001:1900:2254:206c::16:88])
 by mx2.freebsd.org (Postfix) with ESMTP id 753684919;
 Tue, 23 Jul 2013 07:32:03 +0000 (UTC)
Message-ID: <51EE309D.2030106@FreeBSD.org>
Date: Tue, 23 Jul 2013 11:28:29 +0400
From: "Andrey V. Elsukov" <ae@FreeBSD.org>
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64;
 rv:17.0) Gecko/17.0 Thunderbird/17.0
MIME-Version: 1.0
To: Taku YAMAMOTO <taku@tackymt.homeip.net>
Subject: Re: IPSEC crashes after r253088
References: <20130721054323.915f865769e6042c7dc62d08@tackymt.homeip.net>
In-Reply-To: <20130721054323.915f865769e6042c7dc62d08@tackymt.homeip.net>
X-Enigmail-Version: 1.4.6
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: George Neville-Neil <gnn@FreeBSD.org>, freebsd-current@freebsd.org
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.14
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
 <freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-current>, 
 <mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
 <mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 23 Jul 2013 07:32:04 -0000

On 21.07.2013 00:43, Taku YAMAMOTO wrote:
> After r253088, systems with IPSEC and KSTACK_PAGES < 4 crashes on
> booting into multi-user mode.
> 
> The crash is due to sysctl -a in /etc/rc.d/initrandom ended up with
> kernel stack overflow.

> where type is struct ipsecstat which is 12560 bytes of size (larger than
> 3 pages) of size when processing net.inet.ipsec.ipsecstats.

Hi,

Only few fields of struct ipsecstat is used, the rest fields are never
updated. We can split it to several structures, or just remove unused
fields. What is better?

-- 
WBR, Andrey V. Elsukov