<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>I found the bug and here's the patch.

Feng Dai 

--- openswan-2.6.43/linux/net/ipsec/ipsec_proc.c        2015-03-13 13:49:09.000000000 -0500
+++ openswan-2.6.43-tw/linux/net/ipsec/ipsec_proc.c     2015-07-15 19:41:50.000000000 -0500
@@ -153,6 +153,7 @@ static void * proc_eroute_start(struct s
         memset(rjws, 0, sizeof(struct rj_walkstate));
 
         if(rj_initwalk(rjws, rnh, NULL, NULL)) {
+                spin_unlock_bh(&eroute_lock);
                 kfree(rjws);
                 return NULL;
         }
--- openswan-2.6.43/linux/net/ipsec/ipsec_radij.c       2015-03-13 13:49:09.000000000 -0500
+++ openswan-2.6.43-tw/linux/net/ipsec/ipsec_radij.c    2015-07-15 19:17:42.000000000 -0500
@@ -135,6 +135,7 @@ ipsec_breakroute(struct sockaddr_encap *
                            "node not found, eroute delete failed.\n");
                return error;
        }
+        rnh_count--;
 
        spin_unlock_bh(&eroute_lock);
 

                                          </div></body>
</html>