I have also pluto segmentation fault with 2.4.7 version.<br>Bug segm.fault still there using 2.4.8rc1 version.<br><br>I can repeat bug any time: I am connected using Windows XP IPSEC/l2tp Client, then I disable local area network, after enabling it again I re-connect to VPN server, and wholaaa - segm. fault. I should receive message "Cannot eroute"
<br><br>Here is dump:<br><br><br>GNU gdb Red Hat Linux (6.5-15.fc6rh)<br>Copyright (C) 2006 Free Software Foundation, Inc.<br>GDB is free software, covered by the GNU General Public License, and you are<br>welcome to change it and/or distribute copies of it under certain conditions.
<br>Type "show copying" to see the conditions.<br>There is absolutely no warranty for GDB. Type "show warranty" for details.<br>This GDB was configured as "i386-redhat-linux-gnu"...Using host libthread_db library "/lib/libthread_db.so.1".
<br><br><br>warning: Can't read pathname for load map: Input/output error.<br>Reading symbols from /usr/lib/sse2/libgmp.so.3...done.<br>Loaded symbols for /usr/lib/sse2/libgmp.so.3<br>Reading symbols from /lib/libresolv.so.2...done.
<br>Loaded symbols for /lib/libresolv.so.2<br>Reading symbols from /lib/libc.so.6...done.<br>Loaded symbols for /lib/libc.so.6<br>Reading symbols from /lib/ld-linux.so.2...done.<br>Loaded symbols for /lib/ld-linux.so.2<br>
Failed to read a valid object file image from memory.<br>Core was generated by `/usr/libexec/ipsec/pluto --nofork --secretsfile /etc/ipsec.secrets --ipsecdir /'.<br>Program terminated with signal 11, Segmentation fault.
<br>#0 0x0806ebc8 in route_and_eroute (c=0x8145108, sr=0x814514c, st=0x8145b40) at kernel.c:2532<br>2532 kernel.c: No such file or directory.<br> in kernel.c<br>(gdb) <br><br><br><br><br>Here is ipsec.conf<br><br>
version 2.0 # conforms to second version of ipsec.conf specification<br><br># basic configuration<br>config setup<br> nat_traversal=yes<br> virtual_private=%v4:<a href="http://10.0.0.0/8,%v4:192.168.0.0/24,%v4:172.16.0.0/12">
10.0.0.0/8,%v4:192.168.0.0/24,%v4:172.16.0.0/12</a><br> nhelpers=0<br> interfaces="ipsec0=eth0"<br> keep_alive=10<br> force_keepalive=yes<br> dumpdir=/tmp<br><br>conn %default<br>
keyingtries=1<br> disablearrivalcheck=no<br> authby=rsasig<br> leftrsasigkey=%cert<br> rightrsasigkey=%cert<br><br>include /etc/ipsec.d/ipsec_cert.conf<br>include /etc/ipsec.d/examples/no_oe.conf
<br><br><br>/var/log/secure:<br><br>After following logs I've got segm.fault:<br><br>Mar 12 21:54:34 vpn1 pluto[15825]: Can not opportunistically initiate for xxx.xxx.xxx.xxx to yyy.yyy.yyy.yyy: no routed template covers this pair
<br>Mar 12 21:54:34 vpn1 pluto[15825]: ERROR: pfkey write() of SADB_X_DELFLOW message 14 for flow <a href="mailto:int.0@0.0.0.0">int.0@0.0.0.0</a> failed. Errno 14: Bad address<br>Mar 12 21:54:34 vpn1 pluto[15825]: | 02 0f 00 0b 0e 00 00 00 0e 00 00 00 d1 3d 00 00
<br>Mar 12 21:54:34 vpn1 pluto[15825]: | 03 00 15 00 00 00 00 00 02 00 06 a5 48 37 92 95<br>Mar 12 21:54:34 vpn1 pluto[15825]: | 00 00 00 00 00 00 00 00 03 00 16 00 00 00 00 00<br>Mar 12 21:54:34 vpn1 pluto[15825]: | 02 00 06 a5 55 5e 78 f8 00 00 00 00 00 00 00 00
<br>Mar 12 21:54:34 vpn1 pluto[15825]: | 03 00 17 00 00 00 00 00 02 00 ff ff ff ff ff ff<br>Mar 12 21:54:34 vpn1 pluto[15825]: | a8 43 a7 bf 3a 44 a7 bf 03 00 18 00 00 00 00 00<br>Mar 12 21:54:34 vpn1 pluto[15825]: | 02 00 ff ff ff ff ff ff 00 00 00 00 00 00 00 00
<br><br><br><br>