Bug #14778


/usr/local/www/csrf/csrf-magic.php on line 161 PHP Fatal error

Added by Andrew Rojek 6 months ago. Updated 6 months ago.

Console Menu
Target version:
Start date:
Due date:
% Done:


Estimated time:
Release Notes:
Affected Plus Version:
Affected Architecture:


Got this error message when trying to view a small list of CIDR addresses in Firewall->Aliases.
It was followed by a white blank screen and I had to reload the console page to reveal the error message below...

Crash report begins. Anonymous machine information:

FreeBSD 14.0-CURRENT #1 plus-RELENG_23_05_1-n256108-459fc493a87: Wed Jun 28 04:25:15 UTC 2023 root@freebsd:/var/jenkins/workspace/pfSense-Plus-snapshots-23_05_1-main/obj/aarch64/0P4W6joa/var/jenkins/workspace/pfSense-Plus-snapshots-23_05_1-main/source

Crash report details:

PHP Errors:
[13-Sep-2023 10:08:16 Europe/London] PHP Fatal error: str_ireplace(): Cannot use output buffering in output buffering display handlers in /usr/local/www/csrf/csrf-magic.php on line 161
[13-Sep-2023 10:08:53 Europe/London] PHP Fatal error: str_ireplace(): Cannot use output buffering in output buffering display handlers in /usr/local/www/csrf/csrf-magic.php on line 161

No FreeBSD crash data found.

Thank you.

Actions #1

Updated by Jim Pingle 6 months ago

  • Status changed from New to Incomplete
  • Priority changed from Very High to Normal

What exact steps did you take that resulted in that error? Include the page filenames specifically and what exactly was clicked/other actions taken.

I can't reproduce this with any type of clicking around looking at aliases on the various alias tabs.

It may have something to do with the content/config on your system specifically, an add-on package you have, etc.

Actions #2

Updated by Andrew Rojek 6 months ago

Hello Jim,

If memory serves me correctly it's always been related to trying to edit IP Aliases.
Once I've created IP alias via import / paste, I return to the main web interface and
then after a while, return to Firewall->Aliases and try to edit one of the aliases:

It was at this point the screen went completely white and I had to return to the main
web page and then go back to Firewall->Aliases->Edit

As I load more and more CIDR addresses into aliases it seems that pfsense requires
longer to process the aliases, best guess. After creating an Alias, when I'm viewing
the WAN rules page and try to reload the web page to update the stats, the browser
unusually informs me that I will be leaving the page with the [Leave] button.

Actions #3

Updated by Jim Pingle 6 months ago

How many IP addresses would you say are in those aliases? The GUI isn't capable of handling a ton, usually browsers will bog down on the forms once they grow too large. It could be manifesting it that way, but it's hard to say for certain without being able to replicate it. The GUI is limited to a few thousand entries but depending on multiple factors the real limit could end up lower than that.

For really large aliases (more than a few hundred entries) you should be using something like URL table aliases and fetching a text file list from a URL somewhere rather than trying to use the GUI to manage that many.

Actions #4

Updated by Andrew Rojek 6 months ago

Hi Jim,

All-in-all about 140k in size, the largest file has about 2700 CIDR addresses.
I've got a XG7100 that has been maxed out, I'll try and get that setup and see how it performs.
I do have plans to import the tables through an URL but I'm running into SELinux issues and have
to spend some time figuring that out properly. I think we light be looking in the right direction
with the size of aliases. Thanks.


Also available in: Atom PDF