[Swan-dev] KLIPS crashes after kernel update

Thomas Geulig geulig at nentec.de
Thu Oct 31 14:52:32 EET 2013


Hi,

after upgrading from kernel 3.4.65 to 3.4.66 I experienced
crashes in the KLIPS function ipsec_xmit_ipip().

I narrowed the problem down to an API change in the function
ip_select_ident().

Before:
static inline void ip_select_ident(struct iphdr *iph, struct dst_entry *dst,
        struct sock *sk)

After:
static inline void ip_select_ident(struct sk_buff *skb, struct dst_entry *dst,
        struct sock *sk)

This function is referencd in linux/include/libreswan/ipsec_param2.h.

After I changed the first parameter there, the crashes were gone.

In openswan, there is some logic to work across different kernel versions,
but I can't think of a simple way to fix this.
I also don't know which other versions between 3.4 and 3.11 are affected.

Regards

Thomas

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4769 bytes
Desc: not available
URL: <https://lists.libreswan.org/pipermail/swan-dev/attachments/20131031/204604a2/attachment.p7s>


More information about the Swan-dev mailing list