Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 28 Aug 2007 10:15:31 +0800
From:      blue <susan.lan@zyxel.com.tw>
To:        freebsd-net@freebsd.org
Subject:   infinite loop in esp6_ctlinput()?
Message-ID:  <46D38543.4020507@zyxel.com.tw>

next in thread | raw e-mail | index | archive | help
Dear all:

When receiving a "packet too big" ICMP error message, FreeBSD will call 
the ctlinput() function of the upper protocol. If the preceding packet 
is an ESP  IPv6 packet, then FreeBSD will call esp6_ctlinput(). In 
esp6_ctlinput(), pfctlinput2() will be executed to traverse all possible 
upper protocols, and call their registered ctlinput() function. However, 
that would call esp6_ctlinput() again since ESP is one of the upper 
protocols! Then an infinite loop occurs!!

After comparing both IPSEC and FAST_IPSEC, the operations are exactly 
the same. Is it a bug?

Best regards,

Yi-Wen



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?46D38543.4020507>