On 12/04/2014 04:28 PM, Ted Unangst wrote:
On Thu, Dec 04, 2014 at 12:29, Kaya Saman wrote:
On 12/03/2014 07:39 PM, Christian Weisgerber wrote:
On 2014-12-03, Josh Grosse <j...@jggimi.homeip.net> wrote:
This could be the bug fixed in src/sbin/isakmpd/ui.c rev 1.56.
Check your system logs for "isakmpd: backwards memcpy".
It may not be that change, since it was only committed two days ago.
I've
seen the same symptoms in i386 snapshots from Nov 26 and 30.
Exactly, that change _fixes_ it. In recent snapshots, memcpy()
checks for overlap and aborts.
For some background, see
http://www.tedunangst.com/flak/post/memcpy-vs-memmove
When you mention the change **fixes** the bug, is there something in
addition that needs to be done in order to get isakmpd and ipsec working
together?
I am seeing this in the logs:
Dec 4 09:35:33 Gamma-Ray isakmpd: backwards memcpy
Dec 4 09:35:33 <sys_name> isakmpd: backwards memcpy
which is what was stated earlier.
Or does the **fix** exaggerate another bug in the code?
There was *one* fix to isakmpd for *one* bug. There may be more than
one bug. There's certainly a lot more than one memcpy in it.
Thanks everyone for the responses.... sorry for the "cross-wires" in
understanding the situation at present.
Will wait for a fix :-)
Regards,
Kaya
