[vpn-help] 2.2.1 ikec: double free or corruption

Jim Yates jim at wg5jim.net
Fri May 9 10:10:13 CDT 2014


Running On Centos 6.5. with the latest kernel 2.6.32-431.17.1.el6.x86_64 I’m getting:
*** glibc detected *** ikec: double free or corruption (out): 0x00000000021fa510 ***
======= Backtrace: =========
/lib64/libc.so.6(+0x76166)[0x7f03a63ab166]
/lib64/libc.so.6(+0x78c93)[0x7f03a63adc93]
/usr/lib/libss_idb.so.2.2.1(_ZN6_BDATA4growEm+0xa3)[0x7f03a7ca7229]
/usr/lib/libss_idb.so.2.2.1(_ZN6_BDATA3insEPvmm+0x5e)[0x7f03a7ca7b06]
/usr/lib/libss_idb.so.2.2.1(_ZN6_BDATA3insEPcmm+0x34)[0x7f03a7ca7be6]
/usr/lib/libss_ike.so.2.2.1(_ZN15_CONFIG_MANAGER13file_vpn_loadER7_CONFIG+0xdf)[0x7f03a7eb5e1d]
/usr/lib/libss_ike.so.2.2.1(_ZN7_CLIENT11config_loadEv+0xc3)[0x7f03a7eb393d]
ikec(main+0xbe)[0x401732]
/lib64/libc.so.6(__libc_start_main+0xfd)[0x7f03a6353d1d]
ikec[0x4015b9]


  The qui qikea works and will load my config file and connect.    qikec  gives me the same error just different addresses.  I’ve seen this in the archives but no solution. 
I tried a config file that I generated with qikea and exported with the same error.   selinux is set to Permissive.  

Here is the sanitized config file:

n:version:4
s:network-host:XX.XX.XX.XXX
n:network-ike-port:500
s:client-auto-mode:push
n:network-mtu-size:1380
s:client-iface:virtual
n:client-addr-auto:1
s:network-natt-mode:enable
n:network-natt-port:4500
n:network-natt-rate:15
s:network-frag-mode:enable
n:network-frag-size:540
n:network-dpd-enable:0
n:client-banner-enable:0
n:network-notify-enable:0
n:client-wins-used:1
n:client-wins-auto:1
n:client-dns-used:1
n:client-dns-auto:1
n:client-splitdns-used:1
n:client-splitdns-auto:1
s:auth-method:mutual-psk-xauth
s:ident-client-type:ufqdn
s:ident-server-type:any
s:ident-client-data:vpn at mydomain.com
b:auth-mutual-psk:PSK
s:phase1-exchange:aggressive
n:phase1-dhgroup:2
s:phase1-cipher:3des
s:phase1-hash:sha1
n:phase1-life-secs:28800
n:phase1-life-kbytes:0
n:vendor-chkpt-enable:0
s:phase2-transform:esp-3des
s:phase2-hmac:sha1
s:ipcomp-transform:disabled
n:phase2-pfsgroup:2
n:phase2-life-secs:3600
n:phase2-life-kbytes:0
s:policy-level:auto
n:policy-nailed:0
n:policy-list-auto:0
s:policy-list-include:10.77.38.0 / 255.255.255.0
n:client-dns-suffix-auto:1




More information about the vpn-help mailing list