[Openswan Users] Pluto Segmentation fault in 2.4.7 and 2.4.8 rc1

[Djordje Zekovic]

I have also pluto segmentation fault with 2.4.7 version.
Bug segm.fault still there using 2.4.8rc1 version.

I can repeat bug any time: I am connected using Windows XP IPSEC/l2tp
Client, then I disable local area network, after enabling it again I
re-connect to VPN server, and wholaaa - segm. fault. I should receive
message "Cannot eroute"

Here is dump:


GNU gdb Red Hat Linux (6.5-15.fc6rh)
Copyright (C) 2006 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB.  Type "show warranty" for details.
This GDB was configured as "i386-redhat-linux-gnu"...Using host libthread_db
library "/lib/libthread_db.so.1".


warning: Can't read pathname for load map: Input/output error.
Reading symbols from /usr/lib/sse2/libgmp.so.3...done.
Loaded symbols for /usr/lib/sse2/libgmp.so.3
Reading symbols from /lib/libresolv.so.2...done.
Loaded symbols for /lib/libresolv.so.2
Reading symbols from /lib/libc.so.6...done.
Loaded symbols for /lib/libc.so.6
Reading symbols from /lib/ld-linux.so.2...done.
Loaded symbols for /lib/ld-linux.so.2
Failed to read a valid object file image from memory.
Core was generated by `/usr/libexec/ipsec/pluto --nofork --secretsfile
/etc/ipsec.secrets --ipsecdir /'.
Program terminated with signal 11, Segmentation fault.
#0  0x0806ebc8 in route_and_eroute (c=0x8145108, sr=0x814514c, st=0x8145b40)
at kernel.c:2532
2532    kernel.c: No such file or directory.
        in kernel.c
(gdb)




Here is ipsec.conf

version 2.0     # conforms to second version of ipsec.conf specification

# basic configuration
config setup
        nat_traversal=yes
        virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/24,%v4:172.16.0.0/12
        nhelpers=0
        interfaces="ipsec0=eth0"
        keep_alive=10
        force_keepalive=yes
        dumpdir=/tmp

conn %default
        keyingtries=1
        disablearrivalcheck=no
        authby=rsasig
        leftrsasigkey=%cert
        rightrsasigkey=%cert

include /etc/ipsec.d/ipsec_cert.conf
include /etc/ipsec.d/examples/no_oe.conf


/var/log/secure:

After following logs I've got segm.fault:

Mar 12 21:54:34 vpn1 pluto[15825]: Can not opportunistically initiate for
xxx.xxx.xxx.xxx to yyy.yyy.yyy.yyy: no routed template covers this pair
Mar 12 21:54:34 vpn1 pluto[15825]: ERROR: pfkey write() of SADB_X_DELFLOW
message 14 for flow int.0 at 0.0.0.0 failed. Errno 14: Bad address
Mar 12 21:54:34 vpn1 pluto[15825]: |   02 0f 00 0b  0e 00 00 00  0e 00 00
00  d1 3d 00 00
Mar 12 21:54:34 vpn1 pluto[15825]: |   03 00 15 00  00 00 00 00  02 00 06
a5  48 37 92 95
Mar 12 21:54:34 vpn1 pluto[15825]: |   00 00 00 00  00 00 00 00  03 00 16
00  00 00 00 00
Mar 12 21:54:34 vpn1 pluto[15825]: |   02 00 06 a5  55 5e 78 f8  00 00 00
00  00 00 00 00
Mar 12 21:54:34 vpn1 pluto[15825]: |   03 00 17 00  00 00 00 00  02 00 ff
ff  ff ff ff ff
Mar 12 21:54:34 vpn1 pluto[15825]: |   a8 43 a7 bf  3a 44 a7 bf  03 00 18
00  00 00 00 00
Mar 12 21:54:34 vpn1 pluto[15825]: |   02 00 ff ff  ff ff ff ff  00 00 00
00  00 00 00 00
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20070313/bc56ea26/attachment.html