[strongSwan-dev] Dev Digest, Vol 39, Issue 9 : The host system crashes if pinging the IPs behind the tunnel.

[LIU Jingen]

Martin,

Though the issue is not related to the strongswan, hope you can still check my questions, thanks!

I don't know what "non-vanilla comcerto crypto driver" mean. Is that crypto for encrypting the IP package to be ESP pacakge?
I google searched the comcerto cypto, it seems that comcerto cypto is a Hardware of Mindspeed, and I'm using the Mindspeed 
board T3300, is that mean the host system is using the Hardware method to encrypt the IP package to be ESP and there's an 
error with the driver of the HW comcerto of Mindspeed? 

Namely, if I use the software method for crypto, then there's no this issue? If I use the software method, the crypto method had 
been provided by the Linux kernel already?

Best regards
Jingen, Liu
------------
Alcatel-Lucent Shanghai Bell Co.,Ltd. WSPD NanJing R&D Center.
Floor 10, Changjiang Technological Park, No.40, Nanchang Road, GuLou District.

-----Original Message-----
From: dev-bounces+jingen.liu=alcatel-sbell.com.cn at lists.strongswan.org [mailto:dev-bounces+jingen.liu=alcatel-sbell.com.cn at lists.strongswan.org] On Behalf Of dev-request at lists.strongswan.org
Sent: 2013年4月12日 18:00
To: dev at lists.strongswan.org
Subject: Dev Digest, Vol 39, Issue 9

Send Dev mailing list submissions to
	dev at lists.strongswan.org

To subscribe or unsubscribe via the World Wide Web, visit
	https://lists.strongswan.org/mailman/listinfo/dev
or, via email, send a message with subject or body 'help' to
	dev-request at lists.strongswan.org

You can reach the person managing the list at
	dev-owner at lists.strongswan.org

When replying, please edit your Subject line so it is more specific than "Re: Contents of Dev digest..."


Today's Topics:

   1. Re: Issue: After setting up the IPsec tunnel, ping the VPN
      server causes the host crash. (Martin Willi)


----------------------------------------------------------------------

Message: 1
Date: Fri, 12 Apr 2013 09:51:38 +0200
From: Martin Willi <martin at strongswan.org>
Subject: Re: [strongSwan-dev] Issue: After setting up the IPsec
	tunnel, ping the VPN server causes the host crash.
To: LIU Jingen <Jingen.Liu at alcatel-sbell.com.cn>
Cc: "dev at lists.strongswan.org" <dev at lists.strongswan.org>
Message-ID: <1365753098.2616.6.camel at martin>
Content-Type: text/plain; charset="UTF-8"

Hi,

> PING 10.9.133.20Unable to handle kernel NULL pointer dereference at 
> virtual address 00000028  // jingen: It crashes here, and I can 
> reproduce the issue 100%, and the virtual address is always 00000028.

As it is the Linux kernel that crashes, I don't think it is directly related to strongSwan, which is userland only.

> [<c0270554>] (xfrm_output_resume+0xf8/0x34c) from [<c01ea2b0>] 
> (comcerto_crypto_done+0x54/0x64) [<c01ea2b0>] 
> (comcerto_crypto_done+0x54/0x64) from [<c01ea4a0>] 
> (elp_callback+0x1e0/0x254) [<c01ea4a0>] (elp_callback+0x1e0/0x254) 
> from [<c01ea848>] (elp_irq_out_tasklet+0xb8/0x158)

Looks more like a bug in your non-vanilla comcerto crypto driver in the kernel.

Regards
Martin




------------------------------

_______________________________________________
Dev mailing list
Dev at lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/dev

End of Dev Digest, Vol 39, Issue 9
**********************************