[Swan-commit] Changes to ref refs/heads/master

Andrew Cagney cagney at vault.libreswan.fi
Thu Feb 14 23:18:00 UTC 2019


New commits:
commit 6ef3f1f06118d21482d8aaf282e3e73db16152ee
Author: Andrew Cagney <cagney at gnu.org>
Date:   Thu Feb 14 18:06:29 2019 -0500

    ikev2: don't segv when, while expiring a CHILD SA, the parent is missing
    
    Seems to happen because the CHILD SA failed to establish, and started
    replacing simultaneous to, or perhaps triggering, the IKE SA to also
    trying to replace.  Or is that the other way around?
    
    Would a sequence like:
    
    - generate create events for all existing child connections
    - wipe out the entire family
    
    be safer?  Currently this, and children all seem to overlap leading to
    fights like the above.



More information about the Swan-commit mailing list