Re: ipsec hang

Marcin Gibu³a wrote:

Hi,
today I tried to configure ipsec on my linux workstation (with openswan) and 
it hanged just after the init had run /etc/rc.d/init.d/ipsec start. 
It was on linux-2.6.10-rc1-bk20, so I upgraded to 2.6.10-rc2-mm3 but it didn't 
make any difference. 

The alt-sysrq-p shows the following call trace:
xfrm_policy_insert
xfrm_netlink_rcv
netlink_data_ready
netlink_sendmsg
sock_aio_write
do_sync_write
sock_map_fd
sys_select
vfs_write
system_call

The full trace (with regs, etc) is available at 
http://www.iceni.pl/marcin/lockup.jpg 

.config attached. This hang is 100%-reproductible for me. I can attach 
openswan config if needed.

This patch should fix it. The patch "Fix policy update bug when increasing
priority of last policy" broke this, when a policy with lower priority than
an existing policy is inserted xfrm_policy_insert loops forever.

Regards
Patrick

On Wed, 24 Nov 2004 02:32:36 +0100
Patrick McHardy [off-list ref] wrote:

This patch should fix it. The patch "Fix policy update bug when increasing
priority of last policy" broke this, when a policy with lower priority than
an existing policy is inserted xfrm_policy_insert loops forever.

Good catch Patrick, patch applied.

Thanks.