[Swan] Libreswan 4.8 IPv6 connection problem: "The parameter is incorrect"

Andrew Cagney andrew.cagney at gmail.com
Fri Oct 21 17:17:02 EEST 2022


On Fri, 21 Oct 2022 at 10:16, Andrew Cagney <andrew.cagney at gmail.com> wrote:
>
> On Thu, 20 Oct 2022 at 09:05, Paul Wouters <paul at nohats.ca> wrote:
> >
> > On Thu, 20 Oct 2022, Tuomo Soini wrote:
> >
> > >> >>         rightaddresspool=fd00:2600:1000:0000/64
> > >
> > > Your addresspool is too big. If I remember correctly, maximum size is 96
> > > bits.
> >
> > Why aren't we throwing an error in that case?
>
> It is silently truncated vis:

[grrr, gmail]

    if (pool_size >= UINT32_MAX) {
        /*
         * uint32_t overflow, 2001:db8:0:3::/64 truncated to UINT32_MAX
         * uint32_t overflow, 2001:db8:0:3:1::/96, truncated by 1
         */
        pool_size = UINT32_MAX;
        dbg("WARNING addresspool size overflow truncated to %ju", pool_size);
    }


More information about the Swan mailing list