Here is a leak report after an overnight run of pluto. One the connection was restarted several times by the other end. The state number reached upto #1453.
leak: EVENT_SHUNT_SCAN, item size: 32 leak: EVENT_PENDING_DDNS, item size: 32 leak: EVENT_SD_WATCHDOG, item size: 32 leak: EVENT_PENDING_PHASE2, item size: 32 leak: EVENT_REINIT_SECRET, item size: 32 leak: 10 * converted gn, item size: 32 leak: msg_digest, item size: 4144 leak: 4 * crl uri, item size: 35 leak: 24 * converted gn, item size: 32 leak: 3 * msg_digest, item size: 4144 leak: connection alias, item size: 4 leak: 5 * converted gn, item size: 32 leak: 3 * msg_digest, item size: 4144 leak: connection alias, item size: 4 leak: 4 * crl uri, item size: 35 leak: 24 * converted gn, item size: 32 leak: 2 * msg_digest, item size: 4144 leak: EVENT_LOG_DAILY, item size: 32 leak: connection alias, item size: 4 leak: 10 * converted gn, item size: 32 leak: IKEv2 encrypted fragment, item size: 539 leak: ikev2_frag, item size: 56 leak: IKEv2 encrypted fragment, item size: 539 leak: ikev2_frag, item size: 56 leak: msg_digest, item size: 4144 leak: IKEv2 encrypted fragment, item size: 539 leak: ikev2_frag, item size: 56 leak: 5 * msg_digest, item size: 4144 leak: 4 * crl uri, item size: 35 leak: 3 * converted gn, item size: 32 leak: msg_digest, item size: 4144 leak: 4 * converted gn, item size: 32 leak: msg_digest, item size: 4144 leak: connection alias, item size: 4 leak: 2 * msg_digest, item size: 4144 leak: 7 * connection alias, item size: 13 leak: 2 * virtual description, item size: 4 leak: 23 * connection alias, item size: 4 leak: kernel integ, item size: 32 leak detective found 160 leaks, total size 39671 Disclosure - The code is master + rekey-ipsec-pfs. I feel lot of these could be in #master too but could not be sure. -antony _______________________________________________ Swan-dev mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan-dev
