{"action":"created","issue":{"url":"https://api.github.com/repos/libreswan/libreswan/issues/50","repository_url":"https://api.github.com/repos/libreswan/libreswan","labels_url":"https://api.github.com/repos/libreswan/libreswan/issues/50/labels{/name}","comments_url":"https://api.github.com/repos/libreswan/libreswan/issues/50/comments","events_url":"https://api.github.com/repos/libreswan/libreswan/issues/50/events","html_url":"https://github.com/libreswan/libreswan/issues/50","id":139537253,"number":50,"title":"Libreswan 3.16 crash","user":{"login":"jpastuszek","id":20052,"avatar_url":"https://avatars.githubusercontent.com/u/20052?v=3","gravatar_id":"","url":"https://api.github.com/users/jpastuszek","html_url":"https://github.com/jpastuszek","followers_url":"https://api.github.com/users/jpastuszek/followers","following_url":"https://api.github.com/users/jpastuszek/following{/other_user}","gists_url":"https://api.github.com/users/jpastuszek/gists{/gist_id}","starred_url":"https://api.github.com/users/jpastuszek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jpastuszek/subscriptions","organizations_url":"https://api.github.com/users/jpastuszek/orgs","repos_url":"https://api.github.com/users/jpastuszek/repos","events_url":"https://api.github.com/users/jpastuszek/events{/privacy}","received_events_url":"https://api.github.com/users/jpastuszek/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":26,"created_at":"2016-03-09T10:28:55Z","updated_at":"2016-12-06T18:44:46Z","closed_at":null,"body":"Hi,\n\nThis is in relation to crasher I have reported with #48.\nI have managed to get a core dump and gdb bt for it with debug symbols.\n\nI don't know how to reproduce the crash but it happens once/twice a day.\nI have 3-4 clients using the VPN in road warrior style. They would be using IKEv2/LT2P mostly.\n\nI am running this configuration:\n\n```\nversion 2.0\n\nconfig setup\n    # none all raw crypt parsing emitting control lifecycle kernel pfkey nat-t dpd dns oppo oppoinfo whackwatch private x509\n    #plutodebug=\"control parsing x509\"\n    plutodebug=\"none\"\n    nat_traversal=yes\n    uniqueids=no\n    virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:25.0.0.0/8,%v4:100.64.0.0/10,%v6:fd00::/8,%v6:fe80::/10\n\nconn %default\n    # This may come handy if fragmented IP packets are dropped or DF'ed\n    ike_frag=yes\n\n    # x509\n    authby=rsasig\n    leftcert=\"example.com - example.com\"\n    leftsendcert=always\n    leftid=%fromcert\n    rightid=%fromcert\n\n    pfs=no\n    # we cannot rekey for %any, let client rekey\n    rekey=no\n\n    # Timeouts\n    ## Set ikelifetime and keylife to same defaults windows has\n    ikelifetime=8h\n    keylife=1h\n    rekeymargin=3m\n    keyingtries=3\n\n    # Dead node detection\n    dpddelay=4\n    dpdtimeout=30\n    dpdaction=clear\n\n    # ID\n    left=%eth0\n    right=%any\n\n    # listen for auto keying connections\n    auto=add\n\nconn RoadWarrior-IKEv1-L2TP\n    ikev2=no\n    leftprotoport=udp/l2tp\n    rightprotoport=udp/%any\n\nconn RoadWarrior-IKEv2\n    ikev2=insist\n    rightaddresspool=10.224.1.97-10.224.1.128\n    # Changed default in libreswan 3.16\n    ike=3des-sha1;modp1024\n    # Subnet that is accessible for the client (NOTE: leftsubnets= does not work with rightaddresspool...)\n    leftsubnet=10.0.0.0/8\n    # See: https://github.com/libreswan/libreswan/issues/47\n    rightid=%myid\n    forceencaps=yes\n```\n\n```\nLinux 3.4.43-43.43.amzn1.x86_64 (AWS/EC2)\n```\n\nHere is some gdb output; please let me know if you need more output from gdb:\n\n```\n(gdb) bt full\n#0  fiddle_bare_shunt (src=src@entry=0x7fbc74c0e018, dst=dst@entry=0x7fbc74c0e038, policy_prio=policy_prio@entry=0, cur_shunt_spi=259, new_shunt_spi=new_shunt_spi@entry=256, repl=repl@entry=0, transport_proto=6,\n    why=why@entry=0x7fbc73c557db \"expire_bare_shunt\") at /usr/src/debug/libreswan-3.16/programs/pluto/kernel.c:1259\n        this_client = {addr = {u = {v4 = {sin_family = 2, sin_port = 5632, sin_addr = {s_addr = 2214658314}, sin_zero = \"\\000\\000\\000\\000\\000\\000\\000\"}, v6 = {sin6_family = 2, sin6_port = 5632, sin6_flowinfo = 2214658314, sin6_addr = {\n                  __in6_u = {__u6_addr8 = \"\\000\\000\\000\\000\\000\\000\\000\\000!\\231\\306s\\274\\177\\000\", __u6_addr16 = {0, 0, 0, 0, 39201, 29638, 32700, 0}, __u6_addr32 = {0, 0, 1942395169, 32700}}}, sin6_scope_id = 1958595427}}},\n          maskbits = 32}\n        that_client = {addr = {u = {v4 = {sin_family = 2, sin_port = 22989, sin_addr = {s_addr = 1644175626}, sin_zero = \"\\000\\000\\000\\000\\000\\000\\000\"}, v6 = {sin6_family = 2, sin6_port = 22989, sin6_flowinfo = 1644175626, sin6_addr = {\n                  __in6_u = {__u6_addr8 = \"\\000\\000\\000\\000\\000\\000\\000\\000\\001\\000\\000\\000\\000\\000\\000\", __u6_addr16 = {0, 0, 0, 0, 1, 0, 0, 0}, __u6_addr32 = {0, 0, 1, 0}}}, sin6_scope_id = 1958049872}}}, maskbits = 32}\n        null_host = <optimized out>\n#1  0x00007fbc73bee3b6 in delete_bare_shunt (why=0x7fbc73c557db \"expire_bare_shunt\", cur_shunt_spi=<optimized out>, transport_proto=<optimized out>, dst=0x7fbc74c0e038, src=0x7fbc74c0e018)\n    at /usr/src/debug/libreswan-3.16/programs/pluto/kernel.c:1366\nNo locals.\n#2  expire_bare_shunts () at /usr/src/debug/libreswan-3.16/programs/pluto/kernel.c:3490\n        bsp = 0x7fbc74c0e010\n        age = <optimized out>\n        bspp = 0x7fbc74c0f0f8\n#3  0x00007fbc73bbfe75 in timer_event_cb (fd=<optimized out>, event=<optimized out>, arg=0x7fbc74b764e0) at /usr/src/debug/libreswan-3.16/programs/pluto/timer.c:589\n        ev = 0x7fbc74b764e0\n        type = EVENT_SHUNT_SCAN\n        st = 0x0\n        statenum = \"X\\303\\363\\006\\377\\177\\000\\000\\001\\230\\265t\\274\\177\\000\\000\\340h\\264t\\274\\177\\000\\000 \\002\\264t\\274\\177\\000\\000\\001\\000\\000\\000\\000\\000\\000\\000I\\273Lr\\274\\177\\000\\000\\003\\000\\000\\000\\274\\177\\000\\000\\000 \\000\\000\\000\\000\\000\"\n#4  0x00007fbc724cca3c in event_add () from /usr/lib64/libevent-2.0.so.5\nNo symbol table info available.\n#5  0x00000000000e5f40 in ?? ()\nNo symbol table info available.\n#6  0x00007fbc74b49f50 in ?? ()\nNo symbol table info available.\n#7  0x0000000000000000 in ?? ()\nNo symbol table info available.\n\n(gdb) frame 0\n#0  fiddle_bare_shunt (src=src@entry=0x7fbc74c0e018, dst=dst@entry=0x7fbc74c0e038, policy_prio=policy_prio@entry=0, cur_shunt_spi=259, new_shunt_spi=new_shunt_spi@entry=256, repl=repl@entry=0, transport_proto=6,\n    why=why@entry=0x7fbc73c557db \"expire_bare_shunt\") at /usr/src/debug/libreswan-3.16/programs/pluto/kernel.c:1259\n1259        const ip_address *null_host = aftoinfo(addrtypeof(src))->any;\n```\n\nRegards,\nJakub\n"},"comment":{"url":"https://api.github.com/repos/libreswan/libreswan/issues/comments/265235437","html_url":"https://github.com/libreswan/libreswan/issues/50#issuecomment-265235437","issue_url":"https://api.github.com/repos/libreswan/libreswan/issues/50","id":265235437,"user":{"login":"paddydoyle","id":849713,"avatar_url":"https://avatars.githubusercontent.com/u/849713?v=3","gravatar_id":"","url":"https://api.github.com/users/paddydoyle","html_url":"https://github.com/paddydoyle","followers_url":"https://api.github.com/users/paddydoyle/followers","following_url":"https://api.github.com/users/paddydoyle/following{/other_user}","gists_url":"https://api.github.com/users/paddydoyle/gists{/gist_id}","starred_url":"https://api.github.com/users/paddydoyle/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/paddydoyle/subscriptions","organizations_url":"https://api.github.com/users/paddydoyle/orgs","repos_url":"https://api.github.com/users/paddydoyle/repos","events_url":"https://api.github.com/users/paddydoyle/events{/privacy}","received_events_url":"https://api.github.com/users/paddydoyle/received_events","type":"User","site_admin":false},"created_at":"2016-12-06T18:44:46Z","updated_at":"2016-12-06T18:44:46Z","body":"Thanks Paul :+1:  - I can confirm 59e634a prevents the crash on my test system (and gives the log message instead). Looking forward to the 3.19 release. :)"}}
{"actor":{"display_login":"paddydoyle"}}