Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 9 Oct 2008 22:56:36 +0200
From:      VANHULLEBUS Yvan <vanhu@FreeBSD.org>
To:        alan yang <alancyang@gmail.com>
Cc:        freebsd-hackers@freebsd.org, freebsd-questions@freebsd.org
Subject:   Re: setkey panic freebsd7
Message-ID:  <20081009205636.GA3002@zeninc.net>
In-Reply-To: <290865fd0810090846y57bbdc1fs3db5c5334fe80c09@mail.gmail.com>
References:  <290865fd0810090846y57bbdc1fs3db5c5334fe80c09@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi.


On Thu, Oct 09, 2008 at 08:46:32AM -0700, alan yang wrote:
> i wonder people ran into similar issue on setkey with freebsd7 that
> panic at ~/crypto/sha1.c:263 within sha1_result()
>   digest[0] = ctxt->h.b8[3]; digest[1] = ctxt->h.b8[2];
> 
> on the following sadb add with setkey:
>   add 192.168.0.101 192.168.0.110 esp-old 0x10001 -m any -E des-cbc
> "12345678" -A keyed-sha1 "12345678123456781234"
> 
> thanks in advance on any hints.

I guess most people just don't use static SAs anymore :-)

Can you reproduce the bug ?
Are you using /sbin/setkey (provided by FreeBSD),
/usr/local/sbin/setkey (provided by ipsec-tools), or does it crash
with both ?


If you can reproduce it, please fill in a PR, Bjoern or I will take
it.

Anyways, I'll have a look asap at that part of the code, to see if I
can find "something".

Any extra information on how to reproduce the bug is welcome ! :-)


Yvan.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20081009205636.GA3002>