[Openswan dev] 2.3.1: regression from 2.2.0 to 2.3 still exists (3)

Paul Wouters paul at xelerance.com
Sun Apr 10 21:57:40 CEST 2005

On Sun, 10 Apr 2005, Rene Mayrhofer wrote:

> Apr 10 12:44:40 whisper pluto[28125]: "wlanIpsecOnly" #3: ASSERTION FAILED at
> crypto.c:219: st->st_new_iv_len >= e->enc_blocksize

this seems to be the essence of your crasher. If I understood you
correctly, this (crashing) end is openswan 2.3.1, and the remote
is a 2.2.0 right?

Looking at the lines I see:

crypto_cbc_encrypt(const struct encrypt_desc *e, bool enc
                    , u_int8_t *buf, size_t size, struct state *st)
     passert(st->st_new_iv_len >= e->enc_blocksize);
     st->st_new_iv_len = e->enc_blocksize;       /* truncate */

I am not sure why we would passert fail and then still truncate.


More information about the Dev mailing list