On 2014年01月07日 15:47, Steffen Klassert wrote: > On Tue, Jan 07, 2014 at 02:48:57PM +0800, Fan Du wrote: >> When trying to setup IPsec configuration on a 64bits host with >> iproute2(32bits compiled), the intened xfrm policy and sa is >> either deficit or wrong when kernel trying to parse user land >> information. >> >> Further investigatino shows that: >> L: kernel >> R: iproute2 >> >> sizeof userpolicy usersa >> 64bits(unpacked) 168/168 224/224 >> 32bits(unpacked) 164/164 220/220 >> ^ ^ >> L R >> >> To keep kernel and user land see a consistent structure, after >> add packing attribute, now it looks like this: >> >> 64bits( packed) 164/164 217/217 >> 32bits( packed) 164/164 217/217 >> ^ ^ >> L R >> > > We don't change userspace exported structures. This breaks > existing userspace tools. >
Then user with 32bits iproute2 or StrongSwan has to rebuild as 64bits? -- 浮沉随浪只记今朝笑 --fan _______________________________________________ Dev mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/dev
