Your message dated Wed, 22 Oct 2008 22:02:03 +0000
with message-id <[EMAIL PROTECTED]>
and subject line Bug#500027: fixed in ike 2.1.3+dfsg-1
has caused the Debian Bug report #500027,
regarding ike: bug in check of remote IPv4 address
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [EMAIL PROTECTED]
immediately.)


-- 
500027: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=500027
Debian Bug Tracking System
Contact [EMAIL PROTECTED] with problems
--- Begin Message ---
Package: ike
Version: 2.1.0+dfsg-1
Severity: normal

Symptom:
!! : phase1 id mismatch ( src != trg )
!! : src = ipv4-host 10.9.8.7
!! : trg = ipv4-host 255.255.255.255

Cause:
source/iked/ike.peerid.cpp:158
        case ISAKMP_ID_IPV4_ADDR:
        {
                if( ph1->tunnel->peer->iddata_r.size() )
                {
                        ph1id.addr.s_addr =
                                inet_addr( ( char * ) 
ph1->tunnel->peer->iddata_r.buff() );

source/libidb/libidb.cpp:126
        unsigned char * _BDATA::buff()
        {
                return data_buff;
        }

(gdb) print ph1->tunnel->peer->iddata_r
$5 = {_vptr._BDATA = 0x80c70f0,
  data_buff = 0x90dde28 "10.9.8.7\230\210\r\t\021", data_real = 8,
  data_size = 8, data_oset = 0}

Description:
As you can see, the buffer which contains the IPv4 address entered in
the Authentication->"Remote Identity"->"Adress String" field is not \0
terminated. buff() simply returns this buffer and passes it to
inet_addr(), which fails and
returns 255.255.255.255 for this case.

Setup:
s:auth-method:mutual-psk-xauth
s:ident-server-type:address
s:ident-server-data:10.9.8.7

Debian:
This is an upstream bug.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (989, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-686 (SMP w/1 CPU core)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages ike depends on:
ii  libc6                         2.7-13     GNU C Library: Shared libraries
ii  libgcc1                       1:4.3.2-1  GCC support library
ii  libssl0.9.8                   0.9.8g-13  SSL shared libraries
ii  libstdc++6                    4.3.2-1    The GNU Standard C++ Library v3

Versions of packages ike recommends:
pn  ike-qtgui                     <none>     (no description available)

ike suggests no packages.



--- End Message ---
--- Begin Message ---
Source: ike
Source-Version: 2.1.3+dfsg-1

We believe that the bug you reported is fixed in the latest version of
ike, which is due to be installed in the Debian FTP archive:

ike-qtgui_2.1.3+dfsg-1_i386.deb
  to pool/main/i/ike/ike-qtgui_2.1.3+dfsg-1_i386.deb
ike_2.1.3+dfsg-1.diff.gz
  to pool/main/i/ike/ike_2.1.3+dfsg-1.diff.gz
ike_2.1.3+dfsg-1.dsc
  to pool/main/i/ike/ike_2.1.3+dfsg-1.dsc
ike_2.1.3+dfsg-1_i386.deb
  to pool/main/i/ike/ike_2.1.3+dfsg-1_i386.deb
ike_2.1.3+dfsg.orig.tar.gz
  to pool/main/i/ike/ike_2.1.3+dfsg.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [EMAIL PROTECTED],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Philipp Matthias Hahn <[EMAIL PROTECTED]> (supplier of updated ike package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [EMAIL PROTECTED])


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Wed, 22 Oct 2008 23:42:59 +0200
Source: ike
Binary: ike ike-qtgui
Architecture: source i386
Version: 2.1.3+dfsg-1
Distribution: unstable
Urgency: low
Maintainer: Philipp Matthias Hahn <[EMAIL PROTECTED]>
Changed-By: Philipp Matthias Hahn <[EMAIL PROTECTED]>
Description: 
 ike        - Shrew Soft VPN client - Daemon and libraries
 ike-qtgui  - Shrew Soft VPN client - Connection manager
Closes: 500027 500139
Changes: 
 ike (2.1.3+dfsg-1) unstable; urgency=low
 .
   * New upstream version. (Closes: #500139)
     - bug in check of remote IPv4 address (Closes: #500027)
   * debian/rules:
     - "dh_makeshlibs -n" because libraries are not public
     - Remove ${misc:Depends} from Depends-lines
     - add source/ikea/conflict.h, source/iked/etkey to FILESTOCLEAN
   * debian/wrapper/*
     - Do exec instead of forking
   * debian/control:
     - Bump Standards-Version to 3.8.0: no changes required
     - Adopt package on Nicolas request. Thanks for previous maintenance.
   * debian/{control,copyright,init.d,rules}
     - Strip trailing white spaces: s/\s\+$//
   * source/iked/iked.{8,conf.5}
     - Remove path-prefix /usr/local
   * Use script/iked instead of debian/ike.init
Checksums-Sha1: 
 285511b0e71694e97a270d47a7fbb8ecfb769205 1083 ike_2.1.3+dfsg-1.dsc
 17962f127ff393e08025a89429745b22e17759cb 250284 ike_2.1.3+dfsg.orig.tar.gz
 1fe71fbf095a54809e3375c88ca617a5a01a0443 6004 ike_2.1.3+dfsg-1.diff.gz
 dd2b791dae54f04b0f6280eecea94f78b5ed5267 224218 ike_2.1.3+dfsg-1_i386.deb
 ac64f97f5640126b8879031acc681fe08bf01ac2 188380 ike-qtgui_2.1.3+dfsg-1_i386.deb
Checksums-Sha256: 
 6c879208cc370ce97aa22e3779bbcd1ab8657bb085d47df80bd0c18409fdf652 1083 
ike_2.1.3+dfsg-1.dsc
 ae5f4c4eafd88bf897d0f1b537339c067a6bd28641d8968240ccb630740eeecc 250284 
ike_2.1.3+dfsg.orig.tar.gz
 ca227b477517d7ff9013fa5308a5db412a6b8f883de807284765b0076a637328 6004 
ike_2.1.3+dfsg-1.diff.gz
 26204fd95e8c27f53dddcb43514842f53c1b51b6862d306ebf49cc4e202f5564 224218 
ike_2.1.3+dfsg-1_i386.deb
 fafd1608e0f9189ecc8608a2b642568efb8309504d8becbb2c214c7838f84655 188380 
ike-qtgui_2.1.3+dfsg-1_i386.deb
Files: 
 132c29c8e61d31fb56e626346d06c0fd 1083 net extra ike_2.1.3+dfsg-1.dsc
 cedcf16d9d2eae108667bfe4b3e5cfcd 250284 net extra ike_2.1.3+dfsg.orig.tar.gz
 dc15844374247e45d6192e1effad3e70 6004 net extra ike_2.1.3+dfsg-1.diff.gz
 1fab47ab7eaacb508cfb959e7a364971 224218 net extra ike_2.1.3+dfsg-1_i386.deb
 766384456cd9fc2e821513e04049601f 188380 net extra 
ike-qtgui_2.1.3+dfsg-1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAkj/nwgACgkQYPlgoZpUDjlH0QCgr5/lskj4R+1NGf8G4nL0SNwO
tgwAmwaG5tnNySQBhdWWC3e9haekvARG
=AMGk
-----END PGP SIGNATURE-----



--- End Message ---

Reply via email to