netdev - openswan broken between 2.6.24rc8 and final

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20080208135325.GA14434@basil.nowhere.org>
Date:	Fri, 8 Feb 2008 14:53:25 +0100
From:	Andi Kleen <andi@...stfloor.org>
To:	netdev@...r.kernel.org
Subject: openswan broken between 2.6.24rc8 and final

Hi,

Since I updated a system here from 2.6.24rc8 (+ some unrelated patches)
to 2.6.24 openswan in tunnel mode is rather unhappy now. It works 
initially for a few minutes, but then when it comes to renew a key (I think) 
the connection always hangs.  This means on 2.6.24-final the kernel
can now finally reboot again with active ipsec (previously
there were always leaked reference counts), but it cannot 
hold them up for a longer time.

I first thought it was caused by

commit d4782c323d10d3698b71b6a6b3c7bdad33824658
Author: Patrick McHardy <kaber@...sh.net>
Date:   Sun Jan 20 17:24:29 2008 -0800

    [AF_KEY]: Fix skb leak on pfkey_send_migrate() error

but when I just revert just this patch it still doesn't work
(and obviously the reboot problem is back) 

Before I do a full bisect; is there already a fix for this? 

Thanks,

-Andi 

--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html