This bug was fixed in the package strongswan - 4.5.0-1ubuntu1
---
strongswan (4.5.0-1ubuntu1) natty; urgency=low
* Merge from debian unstable (LP: #664371). Remaining changes:
- Build depend on libnm-glib-dev instead of libnm-glib-vpn-dev to
match the network manager
** Changed in: strongswan (Ubuntu)
Status: Confirmed = Fix Committed
--
pluto crashes with segfault
https://bugs.launchpad.net/bugs/664371
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
** Tags added: patch
--
pluto crashes with segfault
https://bugs.launchpad.net/bugs/664371
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
Thank you for the new patch.
I installed the patch (after reverting the previous one) and pluto does not
crash anymore as well. An ipsec listcards is working as well and shows three
certificates.
--
pluto crashes with segfault
https://bugs.launchpad.net/bugs/664371
You received this bug
Great.
Could you try the attached patch (after reverting the previous one).
This should fix the root cause of the problem.
** Patch added: 0001-pluto-Fixed-a-regression-introduced-in-f565d0c575.patch
Hi Rene,
Is there any chance of this being exploitable other than by causing
a DoS based on admin-created configuration?
No. As far as I can see, this only happens if multiple certificates are
stored with the same ID on one smartcard. That's the only case the
added certificate object is
Thank you. Pluto is not crashing any more. I still can't connect to the
VPN, but this might be a configuration problem. I will try to solve this
on myself. If you have any other patches, I should check, you can attach
it to the message.
--
pluto crashes with segfault
--
pluto crashes with segfault
https://bugs.launchpad.net/bugs/664371
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
Please have a look at issue
http://wiki.strongswan.org/issues/116
and try the fix at
http://wiki.strongswan.org/projects/strongswan/repository/revisions/4de8398f
--
pluto crashes with segfault
https://bugs.launchpad.net/bugs/664371
You received this bug notification because you are a member
I think this has been fixed upstream:
http://wiki.strongswan.org/issues/116
http://git.strongswan.org/?p=strongswan.git;a=commit;h=4de8398f
** Changed in: strongswan (Ubuntu)
Status: New = Fix Committed
--
pluto crashes with segfault
https://bugs.launchpad.net/bugs/664371
You received
I tried to install the fix, but still get a segfault.
I'm not sure, that it's the same segfault as described in the patch, as, if I'm
not mistaken, the log indicates the segfault happens in libstrongswan-x509.so
--
pluto crashes with segfault
https://bugs.launchpad.net/bugs/664371
You received
I tried to start pluto in gdb. The result is the following:
Program received signal SIGSEGV, Segmentation fault.
0x003141cc in equals (this=0x80e7188, other=0x0) at x509_cert.c:1248
1248if (other-get_type(other) != CERT_X509)
(gdb) p other
$1 = (certificate_t *) 0x0
(gdb) bt
#0
Thanks for the backtrace. It is indeed a different bug.
From the backtrace it looks like the list of certificates somehow gets
corrupted.
Could you attach the log output with plutodebug=all set in ipsec.conf.
** Changed in: strongswan (Ubuntu)
Status: Fix Committed = Confirmed
--
pluto
I started pluto as following: /usr/lib/ipsec/pluto --nofork --stderrlog
--debug-all 2 /tmp/pluto.txt
You can find the output file at: http://dl.dropbox.com/u/328576/pluto.txt
--
pluto crashes with segfault
https://bugs.launchpad.net/bugs/664371
You received this bug notification because you are
Thanks.
The cause of this segfault seems to be how pluto handles the storage of
two certificates with the same ID.
From your log:
| found cert in slot: 1 with id: 46, label: 'Verschluesselungs Zertifikat 1'
...
| found cert in slot: 1 with id: 46, label: 'Telesec Verschluesselungs
Zertifikat'
** Patch added: dont_free_cert_if_equal.patch
https://bugs.launchpad.net/ubuntu/+source/strongswan/+bug/664371/+attachment/1705165/+files/dont_free_cert_if_equal.patch
--
pluto crashes with segfault
https://bugs.launchpad.net/bugs/664371
You received this bug notification because you are a
16 matches
Mail list logo
