[prev in list] [next in list] [prev in thread] [next in thread]
List: openswan-dev
Subject: Re: [Openswan dev] [PATCH] fix SA leaks in openswan 2.6.22 when
From: "Martin Schiller" <mschiller () tdt ! de>
Date: 2009-08-04 17:00:50
Message-ID: 6C385DD91FD246FD82B3407BDC0F36C7 () athlon64
[Download RAW message or body]
----Original Message----
From: David McCullough [mailto:David_Mccullough@securecomputing.com]
Sent: Tuesday, August 04, 2009 3:51 PM
> Jivin willer.wang@cybertan.com.tw lays it down ...
>> Hi,
>> I have tested this patch, it works.
>> The expired SA will be removed and HW OCF resource can be freed
>> correctly. But I found another problem when using this patch,
>> I established 5 tunnels, and all ipsec_lifetime=60(s).
>> After 21 hours, all tunnels disconnected.
>> And console keeps showing
>> "ipsec_SAref_alloc: unexpected error,
>> refFreeListHead = 102 point to invalid entry"
>>
>> It seems that if total SA ref number > 2^15.
>> The sadb became crashed.
>> Can someone give me advice or direction about this problem ?
>
> That sounds like you need Martins patch posted to the dev list a few
> days back.
> I have attached it here to save looking, would be good if you can
> test with this one,
>
Yes, the patch should fix this error.
Regards,
Martin
_______________________________________________
Dev mailing list
Dev@openswan.org
http://lists.openswan.org/mailman/listinfo/dev
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic