[Openswan dev] another ipsec_doi assertion failed

Paul Wouters paul at xelerance.com
Wed Jan 28 18:21:10 CET 2004


On Wed, 28 Jan 2004, Paul Wouters wrote:

> This time on a normal ipsec conn that should work (and worked before):
> 
> #0  0x42028cc1 in kill () from /lib/i686/libc.so.6
> (gdb) bt
> #0  0x42028cc1 in kill () from /lib/i686/libc.so.6
> #1  0x42028ac8 in raise () from /lib/i686/libc.so.6
> #2  0x4202a019 in abort () from /lib/i686/libc.so.6
> #3  0x0805412a in pexpect_log (
>     pred_str=0x8092cc0 "(st)->st_new_iv_len < sizeof((st)->st_new_iv)",
>     file_str=0x8091c20 "ipsec_doi.c", line_no=1998) at log.c:595
> #4  0x0805d7f9 in quick_outI1 (whack_sock=13, isakmp_sa=0x80c3c90,
>     c=0x80be0d0, policy=65573, try=1, replacing=0) at ipsec_doi.c:1998
> #5  0x080513f0 in unpend (st=0x80c3c90) at connections.c:3977
> #6  0x0806cae1 in complete_state_transition (mdp=0x80ac07c, result=STF_OK)
>     at demux.c:1956
> #7  0x0806c439 in process_packet (mdp=0x80ac07c) at demux.c:1688
> #8  0x0806b03b in comm_handle (ifp=0x80bf698) at demux.c:898
> #9  0x080583c4 in call_server () at server.c:954
> #10 0x08056b6b in main (argc=7, argv=0xbffffc74) at plutomain.c:563
> #11 0x420158d4 in __libc_start_main () from /lib/i686/libc.so.6

Running this same configuration with:

Linux FreeS/WAN U2.04/Kcvs2003Oct02_04:40:33

It works:

104 "robertjc-paul" #7: STATE_MAIN_I1: initiate
106 "robertjc-paul" #7: STATE_MAIN_I2: sent MI2, expecting MR2
108 "robertjc-paul" #7: STATE_MAIN_I3: sent MI3, expecting MR3
004 "robertjc-paul" #7: STATE_MAIN_I4: ISAKMP SA established
112 "robertjc-paul" #8: STATE_QUICK_I1: initiate
004 "robertjc-paul" #8: STATE_QUICK_I2: sent QI2, IPsec SA established {ESP=>0x8442a153 <0x641e5126}

So this is a confirmed bug in pluto in openswan. It is not a bug in freeswan

Paul



More information about the Dev mailing list