[Openswan Users] keeping SA made OCF resource leak

David McCullough David_Mccullough at securecomputing.com
Sat Aug 1 05:52:58 EDT 2009


Jivin Martin Schiller lays it down ...
> ----Original Message----
> From: David McCullough
> Sent: Saturday, August 01, 2009 6:15 AM
> > 
> > I have a patch in the working for this now.
> > 
> > The problem spreads across user/kernel space.
> > 
> > pluto loads each SA individually and then "groups" them.  On delete,
> > because they are grouped,  it expects to be abel to delete any of the
> > SA's and take out the whole group.  
> > 
> > Basically the kernel code was not:
> > 
> > 	1) dereferencing the whole group (So the SA counts were wrong)
> > 	2) not finding all the members in the group proplerly
> > 	3) a few other refcount bugs on the way :-(
> > 
> > I'll be testing this heavily over the weekend and I'll post a patch
> > as soon as I have it cleaned up. 
> > 
> 
> That sounds very promising.
> Maybe the patch I've posted here
> (http://lists.openswan.org/pipermail/dev/2009-July/002119.html) is also
> intereseting for your work on this problem.

Yes,  I still have that sitting in my inbox :-)

Thanks,
Davidm

-- 
David McCullough,  david_mccullough at securecomputing.com,  Ph:+61 734352815
McAfee - SnapGear  http://www.snapgear.com                http://www.uCdot.org


More information about the Users mailing list