[strongSwan-dev] [PATCH 0/2] Add reference counting to child_sa

[Thomas Egerer]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Martin Willi schrobtete:
>> I think it should be possible to catch this in the collide() check.
> 
> I additionally checked in a patch that fixes the problem for this
> configuration for both cases, if xob wins the nonce compare, but also if
> it loses.
I like the patch better than mine :D

> Patches attached, please verify.
We've run our 'real life' stress test the patch included over night and
found one occurrence of the 'CHILD_SA rekey/delete collision...' debug
message in the syslog. No crashes whatsoever. This does not necessarily
mean, that the bug is fixed, but it's a very good indicator.

Thanks, Thomas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkvzq0sACgkQDXd94wpQmdx/bgCeOQa7Fa6cfL3otjavSPMO+dIb
eTAAniOPcRU+BO1rncmDkofZQtAkL3xi
=2As7
-----END PGP SIGNATURE-----