[Openswan Users] Regular pluto crash

[Cédric Schieli]

Hello,


After an upgrade from an old superfreeswan 1.99 to openswan 2.4.6 I am
experiencing regular segfaults in pluto (at least once a week). My setup
follows :

openswan 2.4.6 compiled against uclibc-0.9.28 and kernel 2.4.33 with some
patches (LEAF Bering-uClibc 3.0 beta2)
nhelper=0
X.509 auth
up to 180 tunnels (superfreeswan 1.99) and 20 L2TP roadwarriors (XP SP2)

All is running very fluently until it crashes. Then it restart and all is
coming back.

Here is a gdb backtrace :

GNU gdb 6.3-debian
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-linux"...Using host libthread_db library
"/lib/tls/i686/cmov/libthread_db.so.1".

Core was generated by `/usr/lib/ipsec/pluto --nofork --secretsfile
/etc/ipsec.secrets --ipsecdir /etc/'.
Program terminated with signal 11, Segmentation fault.
Reading symbols from /lib/libresolv.so.0...done.
Loaded symbols for /lib/libresolv.so.0
Reading symbols from /lib/libc.so.0...done.
Loaded symbols for /lib/libc.so.0
Reading symbols from /lib/ld-uClibc.so.0...done.
Loaded symbols for /lib/ld-uClibc.so.0
0 0x0807ffe5 in same_dn (a=
      {ptr = 0x8137600
"0G1\v0\t\006\003U\004\006\023\002FR1\0170\r\006\003U\004\b\023\006France1\0210\017\006\003U\004\n\023\bClemessy1\0240\022\006\003U\004\003\023\vLES
PYLONESäy\226!", len = 73}, b=
      {ptr = 0x0, len = 73}) at x509.c:894
894 if (memcmp(a.ptr, b.ptr, b.len) == 0)
(gdb) bt
0 0x0807ffe5 in same_dn (a=
      {ptr = 0x8137600
"0G1\v0\t\006\003U\004\006\023\002FR1\0170\r\006\003U\004\b\023\006France1\0210\017\006\003U\004\n\023\bClemessy1\0240\022\006\003U\004\003\023\vLES
PYLONESäy\226!", len = 73}, b=
      {ptr = 0x0, len = 73}) at x509.c:894
1 0x08059040 in same_id (a=0x0, b=0x8137600) at id.c:489
0000002 <http://bugs.xelerance.com/view.php?id=2> 0x0804ed34 in
ISAKMP_SA_established (c=0x819f018, serial=0) at connections.c:3386
3 0x0805d604 in main_inI3_outR3_tail (md=0x80efb40, kc=0x0) at
ipsec_doi.c:3338
4 0x0805d2cd in main_inI3_outR3 (md=0x80efb40) at ipsec_doi.c:3179
5 0x08069df7 in process_packet (mdp=0x80d48ec) at demux.c:2352
6 0x080688b1 in comm_handle (ifp=0x80ee6e8) at demux.c:1223
7 0x080579f7 in call_server () at server.c:1166
8 0x0805582a in main (argc=11, argv=0xbffffb64) at plutomain.c:783


I can send other info if requested.

I added a note on bug #656 as it looks similar.


Regards,
Cedric Schieli
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20061003/22407b38/attachment-0001.html