[Openswan Users] Possible bug?

Hansjörg Pfister hp at collax.com
Wed Mar 17 10:53:27 EDT 2010


Hi,

may be there's a bug in pluto:

In ikev1_quick.c (2.6.24) you'll find the following at line 1972:

	 if (st->st_pfs_group != NULL) {
		e = build_ke(&qke->qke_pcrc, st, st->st_pfs_group, ci);
	    } else {
		e = build_nonce(&qke->qke_pcrc, st, ci);
	    }
	
	    passert(st->st_connection != NULL);      <- this condition may be
sometimes true because:

in build_nonce there is at line 248:

event_schedule(EVENT_CRYPTO_FAILED, EVENT_CRYPTO_FAILED_DELAY, st);

this event will delete st_connection!
Same in build_ke!

Regards,

Hansjoerg


More information about the Users mailing list