[Swan-commit] Changes to ref refs/heads/master
Andrew Cagney
cagney at vault.libreswan.fi
Thu Feb 14 23:18:00 UTC 2019
New commits:
commit 6ef3f1f06118d21482d8aaf282e3e73db16152ee
Author: Andrew Cagney <cagney at gnu.org>
Date: Thu Feb 14 18:06:29 2019 -0500
ikev2: don't segv when, while expiring a CHILD SA, the parent is missing
Seems to happen because the CHILD SA failed to establish, and started
replacing simultaneous to, or perhaps triggering, the IKE SA to also
trying to replace. Or is that the other way around?
Would a sequence like:
- generate create events for all existing child connections
- wipe out the entire family
be safer? Currently this, and children all seem to overlap leading to
fights like the above.
More information about the Swan-commit
mailing list