#77 racoon 0.7.3 crashes with Segmentaion Fault just after start

open
nobody
None
5
2014-08-20
2010-04-14
siutkowskij
No

When I add more than two mode_cfg{} statements in racoon.conf (to allot separate ip address pools 2 different groups by auth_groups directive) racoon vanishes just after start without any single error line in log file; all auth are local system. When starting in foreground mode the only line except INFOs and DEBUGs is: "Segmentation fault". SO: Centos 5.4 updated. Example of racoon output:

[root@mobile log]# racoon -4 -v -F -L -dddd
Foreground mode.
2010-04-14 12:59:13: INFO: main.c:182:main(): @(#)ipsec-tools 0.7.3 (http://ipsec-tools.sourceforge.net)
2010-04-14 12:59:13: INFO: main.c:185:main(): @(#)This product linked OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 (http://www.openssl.org/)
2010-04-14 12:59:13: INFO: main.c:187:main(): Reading configuration from "/etc/racoon/racoon.conf"
2010-04-14 12:59:13: DEBUG: pfkey.c:414:pfkey_init(): call pfkey_send_register for AH
2010-04-14 12:59:13: DEBUG: pfkey.c:414:pfkey_init(): call pfkey_send_register for ESP
2010-04-14 12:59:13: DEBUG: pfkey.c:414:pfkey_init(): call pfkey_send_register for IPCOMP
2010-04-14 12:59:13: DEBUG: cftoken.l:768:yycf_set_buffer(): reading config file /etc/racoon/racoon.conf
2010-04-14 12:59:13: DEBUG2: cfparse.y:2291:set_isakmp_proposal(): lifetime = 28800
2010-04-14 12:59:13: DEBUG2: cfparse.y:2294:set_isakmp_proposal(): lifebyte = 0
2010-04-14 12:59:13: DEBUG2: cfparse.y:2296:set_isakmp_proposal(): encklen=128
2010-04-14 12:59:13: DEBUG2: cfparse.y:2359:expand_isakmpspec(): p:1 t:1
2010-04-14 12:59:13: DEBUG2: cfparse.y:2367:expand_isakmpspec(): AES-CBC(7)
2010-04-14 12:59:13: DEBUG2: cfparse.y:2367:expand_isakmpspec(): SHA(2)
2010-04-14 12:59:13: DEBUG2: cfparse.y:2367:expand_isakmpspec(): 1024-bit MODP group(2)
2010-04-14 12:59:13: DEBUG2: cfparse.y:2367:expand_isakmpspec(): Hybrid RSA server(64222)
2010-04-14 12:59:13: DEBUG2: cfparse.y:2369:expand_isakmpspec():
2010-04-14 12:59:13: DEBUG2: cfparse.y:2291:set_isakmp_proposal(): lifetime = 28800
2010-04-14 12:59:13: DEBUG2: cfparse.y:2294:set_isakmp_proposal(): lifebyte = 0
2010-04-14 12:59:13: DEBUG2: cfparse.y:2296:set_isakmp_proposal(): encklen=0
2010-04-14 12:59:13: DEBUG2: cfparse.y:2359:expand_isakmpspec(): p:1 t:2
2010-04-14 12:59:13: DEBUG2: cfparse.y:2367:expand_isakmpspec(): 3DES-CBC(5)
2010-04-14 12:59:13: DEBUG2: cfparse.y:2367:expand_isakmpspec(): MD5(1)
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: INFO: main.c:182:main(): @(#)ipsec-tools 0.7.3 (http://ipsec-tools.sourceforge.net)
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: INFO: main.c:185:main(): @(#)This product linked OpenSSL 0.9.8e-fips-rhel5 01 Jul 2
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: INFO: main.c:187:main(): Reading configuration from "/etc/racoon/racoon.conf"
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG: pfkey.c:414:pfkey_init(): call pfkey_send_register for AH
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG: pfkey.c:414:pfkey_init(): call pfkey_send_register for ESP
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG: pfkey.c:414:pfkey_init(): call pfkey_send_register for IPCOMP
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG: cftoken.l:768:yycf_set_buffer(): reading config file /etc/racoon/racoon.conf
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2291:set_isakmp_proposal(): lifetime = 28800
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2294:set_isakmp_proposal(): lifebyte = 0
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2296:set_isakmp_proposal(): encklen=128
2010-04-14 12:59:13: DEBUG2: cfparse.y:2367:expand_isakmpspec(): 1024-bit MODP group(2)
2010-04-14 12:59:13: DEBUG2: cfparse.y:2367:expand_isakmpspec(): Hybrid RSA server(64222)
2010-04-14 12:59:13: DEBUG2: cfparse.y:2369:expand_isakmpspec():
2010-04-14 12:59:13: DEBUG: algorithm.c:691:alg_oakley_dhdef(): hmac(modp1024)
2010-04-14 12:59:13: INFO: isakmp_cfg.c:2052:isakmp_cfg_resize_pool(): Resize address pool from 0 to 253
Segmentation fault
[root@mobile log]# Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2359:expand_isakmpspec(): p:1 t:1
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2367:expand_isakmpspec(): AES-CBC(7)
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2367:expand_isakmpspec(): SHA(2)
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2367:expand_isakmpspec(): 1024-bit MODP group(2)
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2367:expand_isakmpspec(): Hybrid RSA server(64222)
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2369:expand_isakmpspec():
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2291:set_isakmp_proposal(): lifetime = 28800
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2294:set_isakmp_proposal(): lifebyte = 0
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2296:set_isakmp_proposal(): encklen=0
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2359:expand_isakmpspec(): p:1 t:2
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2367:expand_isakmpspec(): 3DES-CBC(5)
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2367:expand_isakmpspec(): MD5(1)
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2367:expand_isakmpspec(): 1024-bit MODP group(2)
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2367:expand_isakmpspec(): Hybrid RSA server(64222)
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG2: cfparse.y:2369:expand_isakmpspec():
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: DEBUG: algorithm.c:691:alg_oakley_dhdef(): hmac(modp1024)
Apr 14 12:59:13 mobile racoon: 2010-04-14 12:59:13: INFO: isakmp_cfg.c:2052:isakmp_cfg_resize_pool(): Resize address pool from 0 to 253

Discussion

  • siutkowskij
    siutkowskij
    2010-04-14

    my config file

     
    Attachments