The firewall encountered an error after upgrading to 23.01

hugoeyng · Feb 16, 2023, 7:16 PM

Hello, Friends

After upgrading to 23.01 a crash message is showed when I access the webGUI. Any idea about how to fix this?

Crash report begins. Anonymous machine information:

amd64
14.0-CURRENT
FreeBSD 14.0-CURRENT #0 plus-RELENG_23_01-n256037-6e914874a5e: Fri Feb 10 20:30:29 UTC 2023 root@freebsd:/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/obj/amd64/VDZvZksF/var/jenkins/workspace/pfSense-Plus-snapshots-23_01-main/sources/FreeBS

Crash report details:

PHP Errors:
[16-Feb-2023 16:10:16 America/Sao_Paulo] PHP Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1193
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1047): convert_pfxml_to_sgxml_time(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /etc/inc/pkg-utils.inc(691): require_once('/usr/local/pkg/...')
#3 /etc/rc.start_packages(66): sync_package('squidGuard')
#4 {main}
thrown in /usr/local/pkg/squidguard.inc on line 1193

No FreeBSD crash data found.

Vinski- · Feb 16, 2023, 8:26 PM

I have same error, boot failed after update, and I had to restore using boot environment snapshot.

hugoeyng · Feb 16, 2023, 8:28 PM

@vinski When I upgraded to 22.05 the same error happened. I don´t remember what a I did that time.

yaw · Feb 17, 2023, 3:17 PM

Are you able to add/remove the squidguard package, or do you receive the same error I posted about here.

hugoeyng · Feb 17, 2023, 5:18 PM

@yaw I tried to remove and add squidguard and did not work.

I tried to stop squid and then remove and add squidguard. Did not work.

SquidGuard appears as installed at "Installed Packages" but do not appear in "Services". Ok, it is not running, but it could appear in "Services" even as "not running".

It seems to be something to do with permissios to delete or replace a file. I am not sure.

hugoeyng · Feb 17, 2023, 5:21 PM

@hugoeyng said in The firewall encountered an error after upgrading to 23.01:

@yaw I tried to remove and add squidguard and did not work.

I tried to stop squid and then remove and add squidguard. Did not work.

SquidGuard appears as installed at "Installed Packages" but do not appear in "Services". Ok, it is not running, but it could appear in "Services" even as "not running".

It seems to be something to do with permissios to delete or replace a file. I am not sure.

The same error happens when I reinstall or install SquidGuard.

Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1193
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1047): convert_pfxml_to_sgxml_time(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /etc/inc/pkg-utils.inc(868): require_once('/usr/local/pkg/...')
#3 /etc/rc.packages(76): install_package_xml('squidGuard')
#4 {main}
thrown in /usr/local/pkg/squidguard.inc on line 1193
PHP ERROR: Type: 1, File: /usr/local/pkg/squidguard.inc, Line: 1193, Message: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1193
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1047): convert_pfxml_to_sgxml_time(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /etc/inc/pkg-utils.inc(868): require_once('/usr/local/pkg/...')
#3 /etc/rc.packages(76): install_package_xml('squidGuard')
#4 {main}
thrownpkg-static: POST-INSTALL script failed

Cleaning up cache... done.
Success

yaw · Feb 17, 2023, 7:18 PM

@hugoeyng yeah, I don't know what the issue is. I think it's something to do with the PHP upgrade. Probably need the squidguard package maintainer to look at it.

hugoeyng · Feb 17, 2023, 5:54 PM

@yaw I noticed, readind anothers topics, that pfBlocker, Snort and some others are affected in the same way.

matyi.szabolcs · Feb 17, 2023, 7:25 PM

Hello Everyone!
I am experiencing the same error:

>>> Upgrading pfSense-pkg-squidGuard... 
Updating pfSense-core repository catalogue...
pfSense-core repository is up to date.
Updating pfSense repository catalogue...
pfSense repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The following 1 package(s) will be affected (of 0 checked):

Installed packages to be REINSTALLED:
	pfSense-pkg-squidGuard-1.16.18_20 [pfSense]

Number of packages to be reinstalled: 1
[1/1] Reinstalling pfSense-pkg-squidGuard-1.16.18_20...
[1/1] Extracting pfSense-pkg-squidGuard-1.16.18_20: .......... done
Removing squidGuard components...
Menu items... done.
Services... done.
Loading package instructions...

Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1124
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1045): convert_pfxml_to_sgxml_destination(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /etc/inc/pkg-utils.inc(1068): require_once('/usr/local/pkg/...')
#3 /etc/rc.packages(80): delete_package_xml('squidGuard', 'deinstall')
#4 {main}
  thrown in /usr/local/pkg/squidguard.inc on line 1124
PHP ERROR: Type: 1, File: /usr/local/pkg/squidguard.inc, Line: 1124, Message: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1124
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1045): convert_pfxml_to_sgxml_destination(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /etc/inc/pkg-utils.inc(1068): require_once('/usr/local/pkg/...')
#3 /etc/rc.packages(80): delete_package_xml('squidGuard', 'deinstall')
#4 {main}
  thrownpkg-static: DEINSTALL script failed
Saving updated package information...
overwrite!
Loading package configuration... done.
Configuring package components...
Loading package instructions...

Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1124
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1045): convert_pfxml_to_sgxml_destination(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /etc/inc/pkg-utils.inc(868): require_once('/usr/local/pkg/...')
#3 /etc/rc.packages(76): install_package_xml('squidGuard')
#4 {main}
  thrown in /usr/local/pkg/squidguard.inc on line 1124
PHP ERROR: Type: 1, File: /usr/local/pkg/squidguard.inc, Line: 1124, Message: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1124
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1045): convert_pfxml_to_sgxml_destination(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /etc/inc/pkg-utils.inc(868): require_once('/usr/local/pkg/...')
#3 /etc/rc.packages(76): install_package_xml('squidGuard')
#4 {main}
  thrownpkg-static: POST-INSTALL script failed
>>> Cleaning up cache... done.
Success

matyi.szabolcs · Feb 17, 2023, 9:03 PM

Could this be a PHP bug?

[23.01-RELEASE][root@unix.fw]/root: /usr/local/bin/php -f /etc/rc.packages pfSense-pkg-squidGuard DEINSTALL
Removing squidGuard components...
Menu items... done.
Services... done.
Loading package instructions...

Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1124
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1045): convert_pfxml_to_sgxml_destination(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /etc/inc/pkg-utils.inc(1068): require_once('/usr/local/pkg/...')
#3 /etc/rc.packages(80): delete_package_xml('squidGuard', 'deinstall')
#4 {main}
  thrown in /usr/local/pkg/squidguard.inc on line 1124
PHP ERROR: Type: 1, File: /usr/local/pkg/squidguard.inc, Line: 1124, Message: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/pkg/squidguard.inc:1124
Stack trace:
#0 /usr/local/pkg/squidguard.inc(1045): convert_pfxml_to_sgxml_destination(Array)
#1 /usr/local/pkg/squidguard.inc(93): convert_pfxml_to_sgxml()
#2 /etc/inc/pkg-utils.inc(1068): require_once('/usr/local/pkg/...')
#3 /etc/rc.packages(80): delete_package_xml('squidGuard', 'deinstall')
#4 {main}
  thrown[23.01-RELEASE][root@unix.fw]/root

yaw · Feb 18, 2023, 5:16 AM

Not sure.. probably need to open a new bug for squidguard on redmine. I tried creating an account this evening, but I'm having issues with the confirmation email.

Edit: I opened a new bug report on redmine. Maybe that will help get some attention on this issue.

hugoeyng · Feb 18, 2023, 3:22 PM

@matyi-szabolcs I don't think It os a PHP bug. It seems, to me, one from this:

some type pra funtion that the current verison of PHP does not support
the installattion/updating process conflicts with some other running process that is using the resource/file.

JonathanLee · Feb 18, 2023, 7:10 PM

@hugoeyng I have the same issue, when ever I try to save the Squid configuration it give this error.

JonathanLee · Feb 18, 2023, 7:11 PM

@yaw I have removed and reinstalled as soon as you save the configuration it fails

JonathanLee · Feb 18, 2023, 9:00 PM

@yaw

I have the same issue with I save Squid config changes. Thanks for opening the redmine ticket. Everything works until I save the proxy config

PHP_errors.txt

JonathanLee · Feb 19, 2023, 1:24 AM

@yaw should I open a pfSense ticket and reinstall from a USB or will this result in the same issue?

login-to-view
(Image: error when you try to save the Squid config changes)

yaw · Feb 19, 2023, 1:28 AM

@jonathanlee I don't think reinstalling from USB will help. I think the developers are going to need to fix this and update the squid and squidguard packages. You can try opening a ticket if you have a support agreement.

JonathanLee · Feb 19, 2023, 5:23 PM

@yaw I opened a TAC ticket with Netgate. I cannot do a reinstall right now, my family will be mad at me.

https://forum.netgate.com/topic/178036/23-01-squid-issue/3?_=1676773067228

I have a thread open also same issue.

TAC had me perform a BareMetal install via USB drive and reinstall the configuration after, and it cleared up a lot of my issues. The in-place upgrade did not fully install from what their team said last night, it never fully completed.

With the fresh install it is working fine for now.

hugoeyng · Feb 20, 2023, 3:03 PM

@jonathanlee When I open the webGUI a warning message, about the crash error, is showed to me.

login-to-view

And if I try to reinstall the Squid Proxy Filter the crash error message is showed in the "installation progress box"

JonathanLee · Feb 20, 2023, 9:18 PM

@hugoeyng do you have the error? I had to resave reverse proxy because it was blank before the update and save the config as that was missing for me, after update it.