[Openswan Users] Unable to handle kernel NULL pointer dereference at virtual address 00000000

[Jorge Santos]

Hi all

I just got the openswan-2.3.1-1.src.rpm, compiled it against
2.6.11-1.14_FC3 on my gateway and when i try to bring the roadwarrior up
i get this on /var/log/messages of the gateway



May 17 12:00:18 master kernel: Unable to handle kernel NULL pointer
dereference at virtual address 00000000
May 17 12:00:18 master kernel:  printing eip:
May 17 12:00:18 master kernel: f8f4b22d
May 17 12:00:18 master kernel: *pde = 00000000
May 17 12:00:18 master kernel: Oops: 0002 [#15]
May 17 12:00:18 master kernel: Modules linked in: ipsec(U)
ipt_MASQUERADE md5 ipv6 autofs4 ipt_state iptable_mangle iptable_filter
ipt_multi port ip_nat_ftp ip_conntrack_ftp iptable_nat ip_conntrack
ip_tables video button battery ac uhci_hcd ehci_hcd i2c_i801 i2c_core
e1000 floppy  dm_snapshot dm_zero dm_mirror ext3 jbd dm_mod ata_piix
libata sd_mod scsi_mod
May 17 12:00:18 master kernel: CPU:    0
May 17 12:00:18 master kernel: EIP:    0060:[<f8f4b22d>]    Not tainted
VLI
May 17 12:00:18 master kernel: EFLAGS: 00010202   (2.6.11-1.14_FC3)
May 17 12:00:18 master kernel: EIP is at aes_32+0x3/0x499 [ipsec]
May 17 12:00:18 master kernel: eax: c5b87800   ebx: f8f71220   ecx:
00000004   edx: 00000000
May 17 12:00:18 master ipsec__plutorun: /usr/lib/ipsec/_plutorun: line
221:  1113 Segmentation fault      /usr/libexec/ipsec/pluto --nofork --
secretsfile /etc/ipsec.secrets --ipsecdir /etc/ipsec.d --uniqueids --
nat_traversal --virtual_private %v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:
192.168.0.0/16
May 17 12:00:18 master kernel: esi: f77aec00   edi: c5b87800   ebp:
daab1abc   esp: daab1aa8
May 17 12:00:18 master ipsec__plutorun: !pluto failure!:  exited with
error status 139 (signal 11)
May 17 12:00:18 master kernel: ds: 007b   es: 007b   ss: 0068
May 17 12:00:18 master ipsec__plutorun: restarting IPsec after pause...
May 17 12:00:18 master kernel: Process pluto (pid: 1113,
threadinfo=daab1000 task=f562d330)
May 17 12:00:18 master kernel: Stack: c5b87800 f77aec00 f8f71220
38383035 35393140 00000010 00000282 f8f49a0f
May 17 12:00:18 master kernel:        00000000 f8f495da 00000000
00000000 00000000 00000000 00000000 f8f71220
May 17 12:00:18 master kernel:        ee5e2000 00000000 00000208
f8f456d1 00000010 00000000 00000000 00000000
May 17 12:00:18 master kernel: Call Trace:
May 17 12:00:18 master kernel:  [<f8f49a0f>] AES_set_key+0xf/0x18
[ipsec]
May 17 12:00:18 master kernel:  [<f8f495da>] .des_ede3_cbc_encrypt_end
+0x1a/0x51 [ipsec]
May 17 12:00:18 master kernel:  [<f8f456d1>] ipsec_alg_enc_key_create
+0x11c/0x221 [ipsec]
May 17 12:00:18 master kernel:  [<f8f2e658>] pfkey_ipsec_sa_init
+0x1ab/0xbea [ipsec]
May 17 12:00:18 master kernel:  [<c034c5c2>] fn_hash_lookup+0x85/0x90
May 17 12:00:18 master kernel:  [<f8f303c0>] pfkey_add_parse+0x1ab/0x65b
[ipsec]
May 17 12:00:18 master kernel:  [<f8f3844e>] pfkey_msg_parse+0x144/0x8a6
[ipsec]
May 17 12:00:18 master kernel:  [<f8f35426>] pfkey_key_process
+0xa1/0x1b2 [ipsec]
May 17 12:00:18 master kernel:  [<f8f34a9c>] pfkey_msg_interp
+0x2b8/0x35c [ipsec]
May 17 12:00:18 master kernel:  [<c02f93d6>] memcpy_fromiovec+0x27/0x4c
May 17 12:00:18 master kernel:  [<f8f2d7eb>] pfkey_sendmsg+0x279/0x48f
[ipsec]
May 17 12:00:18 master kernel:  [<c02f311e>] sock_aio_write+0x118/0x123
May 17 12:00:18 master kernel:  [<c018c8a2>] do_select+0x33b/0x440
May 17 12:00:18 master kernel:  [<c01750e2>] do_sync_write+0xa1/0xf5
May 17 12:00:18 master kernel:  [<c01e9f0a>] selinux_file_permission
+0xee/0x137
May 17 12:00:18 master kernel:  [<c013d4c9>] autoremove_wake_function
+0x0/0x37
May 17 12:00:18 master kernel:  [<c017523e>] vfs_write+0x108/0x10a
May 17 12:00:18 master kernel:  [<c01752eb>] sys_write+0x41/0x6a
May 17 12:00:18 master kernel:  [<c0103903>] syscall_call+0x7/0xb
May 17 12:00:18 master kernel: Code: 89 e5 83 ec 08 53 56 57 8b 55 0c 8b
4d 14 81 f9 80 00 00 00 72 03 c1 e9 03 83 f9 20 74 0a 83 f9 18 74 0 5 b9
10 00 00 00 c1 e9 02 <89> 4a 00 8d 41 06 89 42 04 8b 75 10 8d 7a 08 fc
55 89 c8 f3 a5


my gateway's ipsec.conf is:

config setup
        interfaces=%defaultroute
        nat_traversal=yes
        virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%
v4:192.168.0.0/16

conn %default
        keyingtries=1
        compress=yes
        disablearrivalcheck=no
        authby=rsasig
        leftrsasigkey=%cert
        rightrsasigkey=%cert
        keylife=1h
        rekeymargin=10m
        ikelifetime=30m

conn vpn-net
        leftsubnet=10.0.0.0/24
        also=vpn

conn vpn
        left=%defaultroute
        leftcert=www.gateway.pem
        leftupdown="/usr/lib/ipsec/_updown.tables"
        right=%any
        rightsubnet=vhost:%no,%all
        auto=add
        pfs=yes

include /etc/ipsec.d/examples/no_oe.conf

Can you help me please?

Thanks in advance

Jorge Santos