Package: ike
Version: 2.1.0+dfsg-1
Severity: normal

Symptom:
!! : phase1 id mismatch ( src != trg )
!! : src = ipv4-host 10.9.8.7
!! : trg = ipv4-host 255.255.255.255

Cause:
source/iked/ike.peerid.cpp:158
        case ISAKMP_ID_IPV4_ADDR:
        {
                if( ph1->tunnel->peer->iddata_r.size() )
                {
                        ph1id.addr.s_addr =
                                inet_addr( ( char * ) 
ph1->tunnel->peer->iddata_r.buff() );

source/libidb/libidb.cpp:126
        unsigned char * _BDATA::buff()
        {
                return data_buff;
        }

(gdb) print ph1->tunnel->peer->iddata_r
$5 = {_vptr._BDATA = 0x80c70f0,
  data_buff = 0x90dde28 "10.9.8.7\230\210\r\t\021", data_real = 8,
  data_size = 8, data_oset = 0}

Description:
As you can see, the buffer which contains the IPv4 address entered in
the Authentication->"Remote Identity"->"Adress String" field is not \0
terminated. buff() simply returns this buffer and passes it to
inet_addr(), which fails and
returns 255.255.255.255 for this case.

Setup:
s:auth-method:mutual-psk-xauth
s:ident-server-type:address
s:ident-server-data:10.9.8.7

Debian:
This is an upstream bug.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (989, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.26-1-686 (SMP w/1 CPU core)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages ike depends on:
ii  libc6                         2.7-13     GNU C Library: Shared libraries
ii  libgcc1                       1:4.3.2-1  GCC support library
ii  libssl0.9.8                   0.9.8g-13  SSL shared libraries
ii  libstdc++6                    4.3.2-1    The GNU Standard C++ Library v3

Versions of packages ike recommends:
pn  ike-qtgui                     <none>     (no description available)

ike suggests no packages.



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to