[Openswan Users] OpenSWAN 2.6.35 - pluto segfaults

[Paul Wouters]

On Thu, 8 Sep 2011, Daniel Bramkamp wrote:

> I am getting a lot of messages like this on a system running OpenSWAN 2.6.35:
> 
> Sep  1 12:16:21 fw-failover-1 kernel: pluto[7633]: segfault at 298 ip 129a5166 sp b23036c0 error 4 in pluto[1297e000+ec000]

> I am using KLIPS on a Grsecurity/PAX hardened kernel 2.6.36. When this happens, the vpn connection is dead for a moment and
> reestablished, which leads to a lot of Citrix sessions being disconnected. L
> 
> Unfortunately, I did not have dumpdir set, so I do not have any core dump to provide yet. I don’t think it’s a hardware issue
> because this is a redundant configuration and the second system produces the same messages when active.
> 
> Are there any known issues regarding Pluto segfaults ? Anything I can try to fix this ?

There are no known crashers in 2.6.35. It would help if you can get a core dump with
gdb backtrace. Perhaps recompile openswan without -O and with -lefence in USERCOMPILE
and with USE_LEAK_DETECTIVE=true (both in Makefile.inc)

Paul