Subject: Re: Problems with IPsec
To: Bill Studenmund <email@example.com>
From: Paul Dokas <firstname.lastname@example.org>
Date: 04/11/2002 21:57:53
On Thu, Apr 11, 2002 at 02:09:18PM -0700, Bill Studenmund wrote:
> data modified on free list e01a3fff size 320 prevtype ??
> invalid addr 0xefe01a4c deadbe != deadbeef
> unaligned addr e01a3fff size 128 type key mgmt XXX 127
> panic was in mountd shutting down.
Sounds like PR 13813 and/or 15953 (personally, they look the same to
me, but those who know more than I think that they're different <shrug>)
I can reproduce this one fairly easily. I just need to use racoon and
# for clients with dynamic IPs
to the config. Then after hitting the machine from about 5 different
IPs (or from the same machine about 5 times), the machine will panic
in a call to key_delsp()
I spent some time figuring out what was going on. Here's the email
that I sent as a result:
Basically, I found that the kernel was dying inside of the LIST_REMOVE()
macro found in key_freesp(). The link list appears to have been stomped.
My best guess was that there's a missing splsoftnet()/splx() somewhere.
Paul Dokas email@example.com
Don Juan Matus: "an enigma wrapped in mystery wrapped in a tortilla."