/etc/inc/util.inc, Line: 3917, Message: Allowed memory exhausted

wolfsden3

PFSense Community 2.7.0-RELEASE (amd64)
built on Wed Jun 28 03:53:34 UTC 2023
FreeBSD 14.0-CURRENT
ntel(R) Celeron(R) J4125 CPU @ 2.00GHz
Current: 2000 MHz, Max: 2001 MHz
4 CPUs: 1 package(s) x 4 core(s)
AES-NI CPU Crypto: Yes (active)
QAT Crypto: No

Memory info:

Error:

Crash report begins.  Anonymous machine information:

amd64
14.0-CURRENT
FreeBSD 14.0-CURRENT #1 RELENG_2_7_0-n255866-686c8d3c1f0: Wed Jun 28 04:21:19 UTC 2023     root@freebsd:/var/jenkins/workspace/pfSense-CE-snapshots-2_7_0-main/obj/amd64/LwYAddCr/var/jenkins/workspace/pfSense-CE-snapshots-2_7_0-main/sources/FreeBSD-src-REL

Crash report details:

PHP Errors:
[13-Nov-2023 12:30:34 America/Detroit] PHP Fatal error:  Allowed memory size of 536870912 bytes exhausted (tried to allocate 20480 bytes) in /etc/inc/util.inc on line 3917

No FreeBSD crash data found.

Anyone have any ideas how I can resolve this issue? It seems to really bug out the system and crash the VOIP quality.

I have PFBlockerNG, SNORT running but there's plenty of juice left in the CPU's & RAM.

Thanks!

jimp

The line in question is processing an alias looking for idn domains:

function alias_idn_to_ascii($alias) {
	if (is_alias($alias)) {
		return $alias;
	} else {
		return idn_to_ascii($alias);
	}
}

Somehow the function call to idn_to_ascii() is chewing up a bunch of memory.

Since it's in alias processing it's probably related to something in pfBlockerNG but it's hard to say with only that one error to go by.

wolfsden3

@jimp

Cleaning up the PFBNG lists (deleting many that were not downloading) seemed to resolve this issue. Now, on to an all new issue with SNORT after upgrading!

Thanks!