[Openswan dev] pluto crash (DoS)

[Paul Wouters]

On Wed, 6 Jul 2005, D. Hugh Redelmeier wrote:

> This message appears to be the end of a thread.  That thread isn't
> clear to me.  Your message started it, and the archive has no content
> for that message.
>
> Paul's message suggests reading a users list message with no
> explanation.  The all I get out of it is that 2.3.0 should be ignored.

> When you get a core file, how did it crash?  If it was the same
> assertion failure, could you get gdb to print out the values of
> st->st_new_iv_len and e->enc_blocksize?  Might as well print out *e
> and *st in case they have other useful information.  It is also useful
> to see the output of the gdb command "where".

The bug is:

Apr 10 12:44:40 whisper pluto[28125]: "wlanIpsecOnly" #3: ASSERTION FAILED at 
crypto.c:219: st->st_new_iv_len >= e->enc_blocksize

Bugs related to this:

http://bugs.xelerance.com/view.php?id=341
http://bugs.xelerance.com/view.php?id=367 
http://bugs.xelerance.com/view.php?id=302

It's high on our list of things to fix.

Paul