i386/84860: certain FAST_IPSEC setup can cause panic
Mike Tancsa
mike at sentex.net
Sat Aug 13 18:30:20 GMT 2005
The following reply was made to PR i386/84860; it has been noted by GNATS.
From: Mike Tancsa <mike at sentex.net>
To: bug-followup at FreeBSD.org
Cc:
Subject: Re: i386/84860: certain FAST_IPSEC setup can cause panic
Date: Sat, 13 Aug 2005 14:22:05 -0400
I tried on a RELENG_6 box as of today, and it has the same problem
[itx-vpn]# kgdb /usr/obj/usr/src/sys/itx/kernel.debug vmcore.1
[GDB will not be able to debug user-mode threads:=20
/usr/lib/libthread_db.so: Undefined symbol "ps_pglobal_lookup"]
GNU gdb 6.1.1 [FreeBSD]
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain=
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i386-marcel-freebsd".
#0 doadump () at pcpu.h:165
165 pcpu.h: No such file or directory.
in pcpu.h
(kgdb) bt
#0 doadump () at pcpu.h:165
#1 0xc054af69 in boot (howto=3D260) at=
/usr/src/sys/kern/kern_shutdown.c:397
#2 0xc054b1fc in panic (fmt=3D0xc0719ec6 "%s") at=20
/usr/src/sys/kern/kern_shutdown.c:553
#3 0xc06d831c in trap_fatal (frame=3D0xdc2fd8d0,=20
eva=3D3252482048) at /usr/src/sys/i386/i386/trap.c:841
#4 0xc06d8087 in trap_pfault (frame=3D0xdc2fd8d0,=20
usermode=3D0, eva=3D3252482048) at /usr/src/sys/i386/i386/trap.c:752
#5 0xc06d7ccd in trap (frame=3D
{tf_fs =3D 8, tf_es =3D 40, tf_ds =3D 40, tf_edi=20
=3D 902154901, tf_esi =3D -126705303, tf_ebp =3D=20
-600843988, tf_isp =3D -600844036, tf_ebx =3D=20
1598615994, tf_edx =3D -101117719, tf_ecx =3D=20
-634311917, tf_eax =3D -1042485272, tf_trapno =3D 12,=20
tf_err =3D 0, tf_eip =3D -1069227066, tf_cs =3D 32,=20
tf_eflags =3D 66050, tf_esp =3D -178607, tf_ss =3D=20
1514139664}) at /usr/src/sys/i386/i386/trap.c:442
#6 0xc06c756a in calltrap () at /usr/src/sys/i386/i386/exception.s:139
#7 0x00000008 in ?? ()
#8 0x00000028 in ?? ()
#9 0x00000028 in ?? ()
#10 0x35c5ca95 in ?? ()
#11 0xf872a169 in ?? ()
#12 0xdc2fd92c in ?? ()
#13 0xdc2fd8fc in ?? ()
#14 0x5f48f1ba in ?? ()
#15 0xf9f910e9 in ?? ()
#16 0xda312b13 in ?? ()
#17 0xc1dcefe8 in ?? ()
#18 0x0000000c in ?? ()
#19 0x00000000 in ?? ()
#20 0xc044e3c6 in rijndaelEncrypt (rk=3D0xc1dcefe8,=20
Nr=3D0, pt=3D0x0, ct=3D0xc1afbe18 "vz\225\r^&qW")
at /usr/src/sys/crypto/rijndael/rijndael-alg-fst.c:962
#21 0xc044f70c in rijndael_encrypt (ctx=3D0x0,=20
src=3D0xc1afbe18 "vz\225\r^&qW", dst=3D0xc1afbe18 "vz\225\r^&qW")
at /usr/src/sys/crypto/rijndael/rijndael-api.c:56
#22 0xc063fd3c in rijndael128_encrypt=20
(key=3D0xc185ba00 "", blk=3D0x0) at /usr/src/sys/opencrypto/xform.c:500
#23 0xc063bc2e in swcr_encdec (crd=3D0xc1dce000,=20
sw=3D0xc1a98720, buf=3D0xc1afba00 "", outtype=3D2)
at /usr/src/sys/opencrypto/cryptosoft.c:290
#24 0xc063ca2d in swcr_process (arg=3D0x0,=20
crp=3D0xc1dcb000, hint=3D0) at /usr/src/sys/opencrypto/cryptosoft.c:958
#25 0xc0639f62 in crypto_invoke (crp=3D0xc1dcb000,=20
hint=3D0) at /usr/src/sys/opencrypto/crypto.c:891
#26 0xc0639a81 in crypto_dispatch=20
(crp=3D0xc1dcb000) at /usr/src/sys/opencrypto/crypto.c:679
#27 0xc06072be in esp_output (m=3D0xc1afba00,=20
isr=3D0xc1dbd480, mp=3D0x0, skip=3D20, protoff=3D9) at=20
/usr/src/sys/netipsec/xform_esp.c:848
#28 0xc05faf9a in ipsec4_process_packet=20
(m=3D0xc1afba00, isr=3D0xc1dbd480, flags=3D32, tunalready=3D0)
at /usr/src/sys/netipsec/ipsec_output.c:472
#29 0xc05e7547 in ip_output (m=3D0xc1afba00,=20
opt=3D0x0, ro=3D0xdc2fdb38, flags=3D32, imo=3D0x0, inp=3D0xc1dc9000)
at /usr/src/sys/netinet/ip_output.c:611
#30 0xc05e98b3 in rip_output (m=3D0xc1afba00,=20
so=3D0x0, dst=3D0) at /usr/src/sys/netinet/raw_ip.c:320
#31 0xc05ea73b in rip_send (so=3D0xc1bb2de8,=20
flags=3D0, m=3D0xc1afba00, nam=3D0xc1938bb0, control=3D0x0, td=3D0xc1d72600)
at /usr/src/sys/netinet/raw_ip.c:785
#32 0xc0582d5b in sosend (so=3D0xc1bb2de8,=20
addr=3D0xc1938bb0, uio=3D0xdc2fdc40, top=3D0xc1afba00,=20
control=3D0x0, flags=3D0, td=3D0xc1d72600)
at /usr/src/sys/kern/uipc_socket.c:829
#33 0xc0588511 in kern_sendit (td=3D0xc1d72600,=20
s=3D3, mp=3D0xdc2fdcbc, flags=3D0, control=3D0x0, segflg=3DUIO_USERSPACE)
at /usr/src/sys/kern/uipc_syscalls.c:772
#34 0xc05883cb in sendit (td=3D0xc1d72600, s=3D3,=20
mp=3D0xdc2fdcbc, flags=3D0) at /usr/src/sys/kern/uipc_syscalls.c:712
---Type <return> to continue, or q <return> to quit---
#35 0xc05886b1 in sendto (td=3D0xc1d72600, uap=3D0x0)=20
at /usr/src/sys/kern/uipc_syscalls.c:830
#36 0xc06d862f in syscall (frame=3D
{tf_fs =3D 59, tf_es =3D 59, tf_ds =3D 59,=20
tf_edi =3D 134539860, tf_esi =3D 64, tf_ebp =3D=20
-1078007960, tf_isp =3D -600842908, tf_ebx =3D 56,=20
tf_edx =3D 4, tf_ecx =3D 134539924, tf_eax =3D 133,=20
tf_trapno =3D 12, tf_err =3D 2, tf_eip =3D 671964391,=20
tf_cs =3D 51, tf_eflags =3D 658, tf_esp =3D=20
-1078008036, tf_ss =3D 59}) at /usr/src/sys/i386/i386/trap.c:986
#37 0xc06c75bf in Xint0x80_syscall () at=
/usr/src/sys/i386/i386/exception.s:200
#38 0x0000003b in ?? ()
#39 0x0000003b in ?? ()
#40 0x0000003b in ?? ()
#41 0x0804ea54 in ?? ()
#42 0x00000040 in ?? ()
#43 0xbfbee768 in ?? ()
#44 0xdc2fdd64 in ?? ()
#45 0x00000038 in ?? ()
#46 0x00000004 in ?? ()
#47 0x0804ea94 in ?? ()
#48 0x00000085 in ?? ()
#49 0x0000000c in ?? ()
#50 0x00000002 in ?? ()
#51 0x280d5ce7 in ?? ()
#52 0x00000033 in ?? ()
#53 0x00000292 in ?? ()
#54 0xbfbee71c in ?? ()
#55 0x0000003b in ?? ()
#56 0x00000000 in ?? ()
#57 0x00000000 in ?? ()
#58 0x00000000 in ?? ()
#59 0x00000000 in ?? ()
#60 0x15a63000 in ?? ()
#61 0xc1d71c48 in ?? ()
#62 0xc1d72600 in ?? ()
#63 0xdc2fd894 in ?? ()
#64 0xdc2fd87c in ?? ()
#65 0xc189d480 in ?? ()
#66 0xc055c067 in sched_switch (td=3D0x40,=20
newtd=3D0x38, flags=3DCannot access memory at address 0xbfbee778
) at /usr/src/sys/kern/sched_4bsd.c:973
Previous frame inner to this frame (corrupt stack?)
(kgdb) bt full
#0 doadump () at pcpu.h:165
No locals.
#1 0xc054af69 in boot (howto=3D260) at=
/usr/src/sys/kern/kern_shutdown.c:397
first_buf_printf =3D 1
#2 0xc054b1fc in panic (fmt=3D0xc0719ec6 "%s") at=20
/usr/src/sys/kern/kern_shutdown.c:553
td =3D (struct thread *) 0xc1d72600
bootopt =3D 260
newpanic =3D 0
ap =3D 0xc1d72600 "H\034=D7=C1=E0Q=D7=C1"
buf =3D "page fault", '\0' <repeats 245 times>
#3 0xc06d831c in trap_fatal (frame=3D0xdc2fd8d0,=20
eva=3D3252482048) at /usr/src/sys/i386/i386/trap.c:841
code =3D 40
type =3D 12
ss =3D 40
esp =3D 0
softseg =3D {ssd_base =3D 0, ssd_limit =3D=20
1048575, ssd_type =3D 27, ssd_dpl =3D 0, ssd_p =3D 1, ssd_xx =3D 12, ssd_xx1=
=3D 1,
ssd_def32 =3D 1, ssd_gran =3D 1}
#4 0xc06d8087 in trap_pfault (frame=3D0xdc2fd8d0,=20
usermode=3D0, eva=3D3252482048) at /usr/src/sys/i386/i386/trap.c:752
va =3D 3252482048
vm =3D (struct vmspace *) 0x0
map =3D 0xc1043000
rv =3D 1
ftype =3D 1 '\001'
td =3D (struct thread *) 0xc1d72600
p =3D (struct proc *) 0xc1d71c48
#5 0xc06d7ccd in trap (frame=3D
{tf_fs =3D 8, tf_es =3D 40, tf_ds =3D 40, tf_edi=20
=3D 902154901, tf_esi =3D -126705303, tf_ebp =3D=20
-600843988, tf_isp =3D -600844036, tf_ebx =3D=20
1598615994, tf_edx =3D -101117719, tf_ecx =3D=20
-634311917, tf_eax =3D -1042485272, tf_trapno =3D 12,=20
tf_err =3D 0, tf_eip =3D -1069227066, tf_cs =3D 32,=20
tf_eflags =3D 66050, tf_esp =3D -178607, tf_ss =3D=20
1514139664}) at /usr/src/sys/i386/i386/trap.c:442
td =3D (struct thread *) 0xc1d72600
p =3D (struct proc *) 0xc1d71c48
sticks =3D 3694123212
i =3D 0
ucode =3D 0
type =3D 12
code =3D 0
eva =3D 3252482048
#6 0xc06c756a in calltrap () at /usr/src/sys/i386/i386/exception.s:139
No locals.
#7 0x00000008 in ?? ()
No symbol table info available.
#8 0x00000028 in ?? ()
No symbol table info available.
#9 0x00000028 in ?? ()
No symbol table info available.
#10 0x35c5ca95 in ?? ()
---Type <return> to continue, or q <return> to quit---
No symbol table info available.
#11 0xf872a169 in ?? ()
No symbol table info available.
#12 0xdc2fd92c in ?? ()
No symbol table info available.
#13 0xdc2fd8fc in ?? ()
No symbol table info available.
#14 0x5f48f1ba in ?? ()
No symbol table info available.
#15 0xf9f910e9 in ?? ()
No symbol table info available.
#16 0xda312b13 in ?? ()
No symbol table info available.
#17 0xc1dcefe8 in ?? ()
No symbol table info available.
#18 0x0000000c in ?? ()
No symbol table info available.
#19 0x00000000 in ?? ()
No symbol table info available.
#20 0xc044e3c6 in rijndaelEncrypt (rk=3D0xc1dcefe8,=20
Nr=3D0, pt=3D0x0, ct=3D0xc1afbe18 "vz\225\r^&qW")
at /usr/src/sys/crypto/rijndael/rijndael-alg-fst.c:962
s0 =3D 902154901
s1 =3D 4168261993
s2 =3D 1598615994
s3 =3D 0
t0 =3D 731056314
t1 =3D 2949092404
t2 =3D 1514139664
t3 =3D 0
r =3D -178607
#21 0xc044f70c in rijndael_encrypt (ctx=3D0x0,=20
src=3D0xc1afbe18 "vz\225\r^&qW", dst=3D0xc1afbe18 "vz\225\r^&qW")
at /usr/src/sys/crypto/rijndael/rijndael-api.c:56
No locals.
#22 0xc063fd3c in rijndael128_encrypt=20
(key=3D0xc185ba00 "", blk=3D0x0) at /usr/src/sys/opencrypto/xform.c:500
No locals.
#23 0xc063bc2e in swcr_encdec (crd=3D0xc1dce000,=20
sw=3D0xc1a98720, buf=3D0xc1afba00 "", outtype=3D2)
at /usr/src/sys/opencrypto/cryptosoft.c:290
m =3D (struct mbuf *) 0xc1afbe00
iv =3D "3z\225Y_$qW@\031=DEw\001\001\000"
blk =3D "p=EE=DC=C18\000\000\000\001\001\000\000\000=E0=DC=C1"
idat =3D (unsigned char *) 0xc1afbe18 "vz\225\r^&qW"
ivp =3D (unsigned char *) 0xdc2fd9b4 "3z\225Y_$qW@\031=DEw\001\001"
piv =3D "p=EE=DC=C18\000\000\000=C8=D9/=DCRch=C0"
exf =3D (struct enc_xform *) 0xc0779380
i =3D 96
k =3D 0
---Type <return> to continue, or q <return> to quit---
j =3D 0
blks =3D 16
#24 0xc063ca2d in swcr_process (arg=3D0x0,=20
crp=3D0xc1dcb000, hint=3D0) at /usr/src/sys/opencrypto/cryptosoft.c:958
crd =3D (struct cryptodesc *) 0xc1dce000
sw =3D (struct swcr_data *) 0xc1a98720
lid =3D 1
type =3D 2
#25 0xc0639f62 in crypto_invoke (crp=3D0xc1dcb000,=20
hint=3D0) at /usr/src/sys/opencrypto/crypto.c:891
hid =3D 0
process =3D (int (*)(void *, struct cryptop *, int)) 0
#26 0xc0639a81 in crypto_dispatch=20
(crp=3D0xc1dcb000) at /usr/src/sys/opencrypto/crypto.c:679
hid =3D 0
result =3D -1042501632
#27 0xc06072be in esp_output (m=3D0xc1afba00,=20
isr=3D0xc1dbd480, mp=3D0x0, skip=3D20, protoff=3D9) at=20
/usr/src/sys/netipsec/xform_esp.c:848
espx =3D (struct enc_xform *) 0xc1d747a4
esph =3D (struct auth_hash *) 0x0
hlen =3D 24
rlen =3D 0
padding =3D -1042501632
blks =3D 44
alen =3D 0
i =3D 0
roff =3D 20
mo =3D (struct mbuf *) 0x2c
tc =3D (struct tdb_crypto *) 0x0
sav =3D (struct secasvar *) 0xc1d98700
saidx =3D (struct secasindex *) 0xc1dbd208
pad =3D (unsigned char *) 0x2c <Address 0x2c out of bounds>
prot =3D 50 '2'
error =3D 44
crde =3D (struct cryptodesc *) 0x0
crda =3D (struct cryptodesc *) 0x0
crp =3D (struct cryptop *) 0xc1dcb000
__func__ =3D "esp_output"
#28 0xc05faf9a in ipsec4_process_packet=20
(m=3D0xc1afba00, isr=3D0xc1dbd480, flags=3D32, tunalready=3D0)
at /usr/src/sys/netipsec/ipsec_output.c:472
saidx =3D {src =3D {sa =3D {sa_len =3D 16 '\020', sa_family =3D 2=
'\002',
sa_data =3D=20
"\000\000=CE3\031\004\000\000\000\000\000\000\000"},=20
sin =3D {sin_len =3D 16 '\020', sin_family =3D 2 '\002',
sin_port =3D 0, sin_addr =3D {s_addr =3D=20
68760526}, sin_zero =3D=20
"\000\000\000\000\000\000\000"}, sin6 =3D {sin6_len =3D 16 '\020',
sin6_family =3D 2 '\002', sin6_port =3D 0,=20
sin6_flowinfo =3D 68760526, sin6_addr =3D {__u6_addr =3D {
__u6_addr8 =3D '\0' <repeats 15 times>,=20
__u6_addr16 =3D {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 =3D {0, 0, 0, 0}}},
sin6_scope_id =3D 0}}, dst =3D {sa =3D {sa_len =3D=20
16 '\020', sa_family =3D 2 '\002',
sa_data =3D=20
"\000\000=CE3\031\003\000\000\000\000\000\000\000"},=20
sin =3D {sin_len =3D 16 '\020', sin_family =3D 2 '\002',
sin_port =3D 0, sin_addr =3D {s_addr =3D=20
51983310}, sin_zero =3D=20
"\000\000\000\000\000\000\000"}, sin6 =3D {sin6_len =3D 16 '\020',
sin6_family =3D 2 '\002', sin6_port =3D 0,=20
sin6_flowinfo =3D 51983310, sin6_addr =3D {__u6_addr =3D {
__u6_addr8 =3D '\0' <repeats 15 times>,=20
__u6_addr16 =3D {0, 0, 0, 0, 0, 0, 0, 0}, __u6_addr32 =3D {0, 0, 0, 0}}},
---Type <return> to continue, or q <return> to quit---
sin6_scope_id =3D 0}}, proto =3D 50, mode =3D 2 '\002', reqid =3D 0}
sav =3D (struct secasvar *) 0xc1d98700
ip =3D (struct ip *) 0xc1afba98
error =3D 0
i =3D 0
__func__ =3D "ipsec4_process_packet"
#29 0xc05e7547 in ip_output (m=3D0xc1afba00,=20
opt=3D0x0, ro=3D0xdc2fdb38, flags=3D32, imo=3D0x0, inp=3D0xc1dc9000)
at /usr/src/sys/netinet/ip_output.c:611
ip =3D (struct ip *) 0xc1afbaac
ifp =3D (struct ifnet *) 0xc1a6f800
m0 =3D (struct mbuf *) 0x0
hlen =3D 20
len =3D -600843464
error =3D 0
dst =3D (struct sockaddr_in *) 0xc1a97310
ia =3D (struct in_ifaddr *) 0xc1bc6400
isbroadcast =3D 0
sw_csum =3D 0
iproute =3D {ro_rt =3D 0xc1bb6d68, ro_dst =3D=20
{sa_len =3D 16 '\020', sa_family =3D 2 '\002',
sa_data =3D "\000\000\ncb\001\000\000\000\000\000\000\000"}}
odst =3D {s_addr =3D 0}
sp =3D (struct secpolicy *) 0xc1d99100
tdbi =3D (struct tdb_ident *) 0x0
mtag =3D (struct m_tag *) 0x0
#30 0xc05e98b3 in rip_output (m=3D0xc1afba00,=20
so=3D0x0, dst=3D0) at /usr/src/sys/netinet/raw_ip.c:320
ip =3D (struct ip *) 0xc1afbaac
error =3D -1045448020
inp =3D (struct inpcb *) 0xc1dc9000
flags =3D 32
#31 0xc05ea73b in rip_send (so=3D0xc1bb2de8,=20
flags=3D0, m=3D0xc1afba00, nam=3D0xc1938bb0, control=3D0x0, td=3D0xc1d72600)
at /usr/src/sys/netinet/raw_ip.c:785
inp =3D (struct inpcb *) 0x0
dst =3D 0
ret =3D -1044697624
#32 0xc0582d5b in sosend (so=3D0xc1bb2de8,=20
addr=3D0xc1938bb0, uio=3D0xdc2fdc40, top=3D0xc1afba00,=20
control=3D0x0, flags=3D0, td=3D0xc1d72600)
at /usr/src/sys/kern/uipc_socket.c:829
mp =3D (struct mbuf **) 0xc1afba00
m =3D (struct mbuf *) 0xc1afba00
space =3D 65599
len =3D 64
resid =3D 0
clen =3D 64
error =3D 0
dontroute =3D 0
atomic =3D 1
#33 0xc0588511 in kern_sendit (td=3D0xc1d72600,=20
s=3D3, mp=3D0xdc2fdcbc, flags=3D0, control=3D0x0, segflg=3DUIO_USERSPACE)
---Type <return> to continue, or q <return> to quit---
at /usr/src/sys/kern/uipc_syscalls.c:772
fp =3D (struct file *) 0xc1b51990
auio =3D {uio_iov =3D 0xdc2fdcb4, uio_iovcnt=20
=3D 1, uio_offset =3D 64, uio_resid =3D 0, uio_segflg =3D UIO_USERSPACE,
uio_rw =3D UIO_WRITE, uio_td =3D 0xc1d72600}
iov =3D (struct iovec *) 0x0
so =3D (struct socket *) 0xc1bb2de8
i =3D 0
len =3D 64
error =3D 0
ktruio =3D (struct uio *) 0x0
#34 0xc05883cb in sendit (td=3D0xc1d72600, s=3D3,=20
mp=3D0xdc2fdcbc, flags=3D0) at /usr/src/sys/kern/uipc_syscalls.c:712
control =3D (struct mbuf *) 0x0
to =3D (struct sockaddr *) 0xc1938bb0
error =3D 0
#35 0xc05886b1 in sendto (td=3D0xc1d72600, uap=3D0x0)=20
at /usr/src/sys/kern/uipc_syscalls.c:830
msg =3D {msg_name =3D 0xc1938bb0,=20
msg_namelen =3D 16, msg_iov =3D 0xdc2fdcb4, msg_iovlen =3D 1, msg_control =
=3D 0x0,
msg_controllen =3D 3694124284, msg_flags =3D 0}
aiov =3D {iov_base =3D 0x804ea94, iov_len =3D 0}
error =3D 0
#36 0xc06d862f in syscall (frame=3D
{tf_fs =3D 59, tf_es =3D 59, tf_ds =3D 59,=20
tf_edi =3D 134539860, tf_esi =3D 64, tf_ebp =3D=20
-1078007960, tf_isp =3D -600842908, tf_ebx =3D 56,=20
tf_edx =3D 4, tf_ecx =3D 134539924, tf_eax =3D 133,=20
tf_trapno =3D 12, tf_err =3D 2, tf_eip =3D 671964391,=20
tf_cs =3D 51, tf_eflags =3D 658, tf_esp =3D=20
-1078008036, tf_ss =3D 59}) at /usr/src/sys/i386/i386/trap.c:986
params =3D 0xbfbee720 <Address 0xbfbee720 out of bounds>
callp =3D (struct sysent *) 0xc076531c
td =3D (struct thread *) 0xc1d72600
p =3D (struct proc *) 0xc1d71c48
orig_tf_eflags =3D 658
sticks =3D 0
error =3D 0
narg =3D 6
args =3D {3, 134539860, 64, 0, 134605552, 16, 0, -1042867128}
code =3D 133
#37 0xc06c75bf in Xint0x80_syscall () at=
/usr/src/sys/i386/i386/exception.s:200
No locals.
#38 0x0000003b in ?? ()
No symbol table info available.
#39 0x0000003b in ?? ()
No symbol table info available.
#40 0x0000003b in ?? ()
No symbol table info available.
#41 0x0804ea54 in ?? ()
No symbol table info available.
#42 0x00000040 in ?? ()
No symbol table info available.
#43 0xbfbee768 in ?? ()
---Type <return> to continue, or q <return> to quit---
No symbol table info available.
#44 0xdc2fdd64 in ?? ()
No symbol table info available.
#45 0x00000038 in ?? ()
No symbol table info available.
#46 0x00000004 in ?? ()
No symbol table info available.
#47 0x0804ea94 in ?? ()
No symbol table info available.
#48 0x00000085 in ?? ()
No symbol table info available.
#49 0x0000000c in ?? ()
No symbol table info available.
#50 0x00000002 in ?? ()
No symbol table info available.
#51 0x280d5ce7 in ?? ()
No symbol table info available.
#52 0x00000033 in ?? ()
No symbol table info available.
#53 0x00000292 in ?? ()
No symbol table info available.
#54 0xbfbee71c in ?? ()
No symbol table info available.
#55 0x0000003b in ?? ()
No symbol table info available.
#56 0x00000000 in ?? ()
No symbol table info available.
#57 0x00000000 in ?? ()
No symbol table info available.
#58 0x00000000 in ?? ()
No symbol table info available.
#59 0x00000000 in ?? ()
No symbol table info available.
#60 0x15a63000 in ?? ()
No symbol table info available.
#61 0xc1d71c48 in ?? ()
No symbol table info available.
#62 0xc1d72600 in ?? ()
No symbol table info available.
#63 0xdc2fd894 in ?? ()
No symbol table info available.
#64 0xdc2fd87c in ?? ()
No symbol table info available.
#65 0xc189d480 in ?? ()
No symbol table info available.
#66 0xc055c067 in sched_switch (td=3D0x40,=20
newtd=3D0x38, flags=3DCannot access memory at address 0xbfbee778
) at /usr/src/sys/kern/sched_4bsd.c:973
---Type <return> to continue, or q <return> to quit---
kg =3D (struct ksegrp *) 0x0
p =3D (struct proc *) 0x804ea54
(kgdb)
FreeBSD itx-vpn.sentex.ca 6.0-BETA2 FreeBSD=20
6.0-BETA2 #3: Sat Aug 13 11:00:08 EDT 2005
setkey -c <<EOF
add 172.16.1.4 172.16.1.3 esp 1044=20
-m any -E rijndael-cbc "1234567890123456A" ;
add 172.16.1.3 172.16.1.4 esp 1044 -m any=20
-E rijndael-cbc "1234567890123456A" ;
spdadd 192.168.42.0/23 10.99.98.0/23 any=20
-P out ipsec esp/tunnel/172.16.1.4-172.16.1.3/require ;
spdadd 10.99.98.0/23 192.168.42.0/23 any=20
-P in ipsec esp/tunnel/172.16.1.3-172.16.1.4/require ;
EOF
i.e. having a key of 1234567890123456 works=20
fine. Having one of 1234567890123456A blows it=20
up as soon as a packet that hits the policy tries to go out or get to it.
---Mike
--------------------------------------------------------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications, mike at sentex.net
Providing Internet since 1994 www.sentex.net
Cambridge, Ontario Canada www.sentex.net/mike
More information about the freebsd-i386
mailing list