[Openswan dev] 2.3.1: regression from 2.2.0 to 2.3 still exists (3)

[Paul Wouters]

On Sun, 10 Apr 2005, Rene Mayrhofer wrote:

> Apr 10 12:44:40 whisper pluto[28125]: "wlanIpsecOnly" #3: ASSERTION FAILED at
> crypto.c:219: st->st_new_iv_len >= e->enc_blocksize

this seems to be the essence of your crasher. If I understood you
correctly, this (crashing) end is openswan 2.3.1, and the remote
is a 2.2.0 right?

Looking at the lines I see:

void
crypto_cbc_encrypt(const struct encrypt_desc *e, bool enc
                    , u_int8_t *buf, size_t size, struct state *st)
{
     passert(st->st_new_iv_len >= e->enc_blocksize);
     st->st_new_iv_len = e->enc_blocksize;       /* truncate */

I am not sure why we would passert fail and then still truncate.
Michael?

Paul