On Thu, Dec 04, 2014 at 12:29, Kaya Saman wrote: > On 12/03/2014 07:39 PM, Christian Weisgerber wrote: >> On 2014-12-03, Josh Grosse <j...@jggimi.homeip.net> wrote: >> >>>> This could be the bug fixed in src/sbin/isakmpd/ui.c rev 1.56. >>>> Check your system logs for "isakmpd: backwards memcpy". >>> It may not be that change, since it was only committed two days ago. >>> I've >>> seen the same symptoms in i386 snapshots from Nov 26 and 30. >> Exactly, that change _fixes_ it. In recent snapshots, memcpy() >> checks for overlap and aborts. >> >> For some background, see >> http://www.tedunangst.com/flak/post/memcpy-vs-memmove >> > > When you mention the change **fixes** the bug, is there something in > addition that needs to be done in order to get isakmpd and ipsec working > together? > > > I am seeing this in the logs: > > Dec 4 09:35:33 Gamma-Ray isakmpd: backwards memcpy > > Dec 4 09:35:33 <sys_name> isakmpd: backwards memcpy > > > which is what was stated earlier. > > > Or does the **fix** exaggerate another bug in the code?
There was *one* fix to isakmpd for *one* bug. There may be more than one bug. There's certainly a lot more than one memcpy in it.
