[strongSwan-dev] Dev Digest, Vol 39, Issue 9 : The host system crashes if pinging the IPs behind the tunnel.

LIU Jingen Jingen.Liu at alcatel-sbell.com.cn
Fri Apr 12 12:34:57 CEST 2013


Though the issue is not related to the strongswan, hope you can still check my questions, thanks!

I don't know what "non-vanilla comcerto crypto driver" mean. Is that crypto for encrypting the IP package to be ESP pacakge?
I google searched the comcerto cypto, it seems that comcerto cypto is a Hardware of Mindspeed, and I'm using the Mindspeed 
board T3300, is that mean the host system is using the Hardware method to encrypt the IP package to be ESP and there's an 
error with the driver of the HW comcerto of Mindspeed? 

Namely, if I use the software method for crypto, then there's no this issue? If I use the software method, the crypto method had 
been provided by the Linux kernel already?

Best regards
Jingen, Liu
Alcatel-Lucent Shanghai Bell Co.,Ltd. WSPD NanJing R&D Center.
Floor 10, Changjiang Technological Park, No.40, Nanchang Road, GuLou District.

-----Original Message-----
From: dev-bounces+jingen.liu=alcatel-sbell.com.cn at lists.strongswan.org [mailto:dev-bounces+jingen.liu=alcatel-sbell.com.cn at lists.strongswan.org] On Behalf Of dev-request at lists.strongswan.org
Sent: 2013年4月12日 18:00
To: dev at lists.strongswan.org
Subject: Dev Digest, Vol 39, Issue 9

Send Dev mailing list submissions to
	dev at lists.strongswan.org

To subscribe or unsubscribe via the World Wide Web, visit
or, via email, send a message with subject or body 'help' to
	dev-request at lists.strongswan.org

You can reach the person managing the list at
	dev-owner at lists.strongswan.org

When replying, please edit your Subject line so it is more specific than "Re: Contents of Dev digest..."

Today's Topics:

   1. Re: Issue: After setting up the IPsec tunnel, ping the VPN
      server causes the host crash. (Martin Willi)


Message: 1
Date: Fri, 12 Apr 2013 09:51:38 +0200
From: Martin Willi <martin at strongswan.org>
Subject: Re: [strongSwan-dev] Issue: After setting up the IPsec
	tunnel, ping the VPN server causes the host crash.
To: LIU Jingen <Jingen.Liu at alcatel-sbell.com.cn>
Cc: "dev at lists.strongswan.org" <dev at lists.strongswan.org>
Message-ID: <1365753098.2616.6.camel at martin>
Content-Type: text/plain; charset="UTF-8"


> PING to handle kernel NULL pointer dereference at 
> virtual address 00000028  // jingen: It crashes here, and I can 
> reproduce the issue 100%, and the virtual address is always 00000028.

As it is the Linux kernel that crashes, I don't think it is directly related to strongSwan, which is userland only.

> [<c0270554>] (xfrm_output_resume+0xf8/0x34c) from [<c01ea2b0>] 
> (comcerto_crypto_done+0x54/0x64) [<c01ea2b0>] 
> (comcerto_crypto_done+0x54/0x64) from [<c01ea4a0>] 
> (elp_callback+0x1e0/0x254) [<c01ea4a0>] (elp_callback+0x1e0/0x254) 
> from [<c01ea848>] (elp_irq_out_tasklet+0xb8/0x158)

Looks more like a bug in your non-vanilla comcerto crypto driver in the kernel.



Dev mailing list
Dev at lists.strongswan.org

End of Dev Digest, Vol 39, Issue 9

More information about the Dev mailing list