[PATCH] firewall3: fix process termination in child processes

Stacy Corcoran stacy.corcoran at verkada.com
Mon Jan 5 10:06:12 PST 2026


My intention with this patch is to fix a bug in how firewall3 handles
forked child failures when exec fails. Since firewall3 is still used
in many legacy/third-party solutions that cannot easily upgrade to
fw4, I believe this fix is warranted for the community at large.

The specific process where we encountered this bug was within
fw3_hotplug when it attempted a call to hotplug-call.

On Wed, Dec 24, 2025 at 5:22 AM Jonas Lochmann <openwrt at jonaslochmann.de> wrote:
>
> I am curious: What kind of subprocess is invoked that fails sometimes?
>
> Another question: Why do you use firewall3 and not firewall4? If there
> is no reason for staying at firewall3, upgrading could maybe solve this.
>
> > I have submitted a pull request for firewall3 to fix a bug where child
> > processes fail to terminate if an exec operation fails.



--
Stacy Corcoran
Software Engineer
406 E 3rd Ave | San Mateo, CA 94401
stacy.corcoran at verkada.com  | verkada.com



More information about the openwrt-devel mailing list