[strongSwan-dev] [PATCH 0/2] Add reference counting to child_sa
thomas.egerer at secunet.com
Wed May 19 11:11:39 CEST 2010
-----BEGIN PGP SIGNED MESSAGE-----
Martin Willi schrobtete:
>> I think it should be possible to catch this in the collide() check.
> I additionally checked in a patch that fixes the problem for this
> configuration for both cases, if xob wins the nonce compare, but also if
> it loses.
I like the patch better than mine :D
> Patches attached, please verify.
We've run our 'real life' stress test the patch included over night and
found one occurrence of the 'CHILD_SA rekey/delete collision...' debug
message in the syslog. No crashes whatsoever. This does not necessarily
mean, that the bug is fixed, but it's a very good indicator.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
More information about the Dev