The latest ocserv cannot work well with IOS Anyconnect using profile.xml

Nikos Mavrogiannopoulos n.mavrogiannopoulos at gmail.com
Mon Dec 21 14:12:33 PST 2015


On Mon, Dec 21, 2015 at 8:57 PM, Yick Xie <yick.xie at gmail.com> wrote:
> Hi Nikos,
> Sorry for the size of the log I sent before, please check my log
> without --leak-check=full option.
> /profiles//etc/ocserv/profile.xml
[...]
> ==9643== Invalid read of size 8
> ==9643==    at 0x42671B: get_config_handler (worker-http-handlers.c:51)
> ==9643==    by 0x40C26A: vpn_server (worker-vpn.c:534)
> ==9643==    by 0x40910D: listen_watcher_cb (main.c:1061)
> ==9643==    by 0x6227E44: ev_invoke_pending (in
> /usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
> ==9643==    by 0x622AFE6: ev_run (in /usr/lib/x86_64-linux-gnu/libev.so.4.0.0)
> ==9643==    by 0x409DB4: main (main.c:1342)
> ==9643==  Address 0xa0 is not stack'd, malloc'd or (recently) free'd

Thank you, this is sufficient to figure the issue. I'll commit a fix soon.

Thank you also for testing the master branch; if that's not
intentional and you want stability I recommend to use the
ocserv_0_10_x branch. The master branch is going to become 0.11.0
sometime in the next year.

regards,
Nikos



More information about the openconnect-devel mailing list