Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 212129 - net-misc/cisco-vpnclient-3des-4.8.00.0490-r1 crashes computer
Summary: net-misc/cisco-vpnclient-3des-4.8.00.0490-r1 crashes computer
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: High major (vote)
Assignee: No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it
URL:
Whiteboard:
Keywords:
Depends on: 234361
Blocks:
  Show dependency tree
 
Reported: 2008-03-02 22:35 UTC by a_tevelev
Modified: 2012-02-12 11:11 UTC (History)
5 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
emerge --info (emerge.info,3.73 KB, text/plain)
2008-03-02 22:37 UTC, a_tevelev
Details
dmesg (dmesg.txt,26.58 KB, text/plain)
2008-03-02 22:38 UTC, a_tevelev
Details
vpnclient status (vpnclient.status,437 bytes, text/plain)
2008-03-02 22:39 UTC, a_tevelev
Details
vpnclient stats (vpnclient.stat,799 bytes, text/plain)
2008-03-02 22:39 UTC, a_tevelev
Details
vpnclient verify (vpnclient.verify,357 bytes, text/plain)
2008-03-02 22:40 UTC, a_tevelev
Details
vpnclient wrapper script (vpnclient,738 bytes, text/plain)
2008-05-16 13:57 UTC, Koen Smets
Details

Note You need to log in before you can comment on or make changes to this bug.
Description a_tevelev 2008-03-02 22:35:45 UTC
net-misc/cisco-vpnclient-3des-4.8.00.0490-r1 installs and starts without a problem.ic

It also connects to the VPN server without a problem. Connectivity can be verified through ping. The system remains stable as long as the network is not used.

However, a network traffic crashes it - computer completely locks up and the caps led start blinking. The system does not respond to the keyboard or the mouse until a hard reboot is done.

Specifically, the crash can be caused by accessing www.firefox.com site through lynx. (www.google.com was successful in a single test.)

lynx was used in the console mode with neither 'nv' nor 'nvidia' module loaded.

The same behavior is observed with Firefox, rdesktop and TightVNC (in the graphics mode, of course).

This behavior is observed with sys-kernel/tuxonice-sources-2.6.24-r1, sys-kernel/tuxonice-sources-2.6.24-r2, sys-kernel/tuxonice-sources-2.6.24-r3, sys-kernel/gentoo-sources-2.6.23-r8, sys-kernel/gentoo-sources-2.6.23-r9 and sys-kernel/gentoo-sources-2.6.24-r2.

The machine is a laptop (running on an external power with a charged battery attached).

lynx crashes and a kernel panic message is displayed. I was unsuccessful capturing the message. Its end is:

Code: 41 8b 04 b0 31 04 b3 44 39 f7 72 f0 31 f6 31 ff 39 ee 73 4b

RIP [<ffffffff881633f4>] :cisco_ipsec: CBCDecryptUpdate+0xb4/0x160
 RSP <ffffffff805d19c0>

CR2: 0000000000000000

---[ end trace 80343564b2ec63ef ]---
Kernel panic - not syncing: Aiee, killing interrupt handler!

As a side note: another system (server) has a similar behavior: cisco vpnclient runs successfully somewhere from a few minutes to a couple of hours with all network application running without problems: Firefox, emerge --sync, rdesktop, TightVNC. Then suddenly, the system reboots, without any shutdown (as if someone pressed 'reset' button, or pulled out the power cord and immediately put it back). The system runs 2.6.23-hardened-r6. (Currently, there is no possibility to change the kernel on that machine.)
Comment 1 a_tevelev 2008-03-02 22:37:55 UTC
Created attachment 145141 [details]
emerge --info
Comment 2 a_tevelev 2008-03-02 22:38:20 UTC
Created attachment 145142 [details]
dmesg
Comment 3 a_tevelev 2008-03-02 22:39:01 UTC
Created attachment 145143 [details]
vpnclient status
Comment 4 a_tevelev 2008-03-02 22:39:40 UTC
Created attachment 145144 [details]
vpnclient stats
Comment 5 a_tevelev 2008-03-02 22:40:18 UTC
Created attachment 145145 [details]
vpnclient verify
Comment 6 a_tevelev 2008-03-08 02:04:12 UTC
A relevant forum thread: http://forums.gentoo.org/viewtopic-t-646262.html
Comment 7 Koen Smets 2008-05-16 13:57:09 UTC
Created attachment 153339 [details]
vpnclient wrapper script

I suffered the same problems on my ThinkPad X61 running ~amd64. Replacing the symbolic link /usr/bin/vpnclient, with this shell script it works for me (an many others). See, <a>http://forum.tuxx-home.at/viewtopic.php?f=15&t=457&st=0&sk=t&sd=a&start=15#p3539</a>.
Comment 8 Andreas Simon 2008-11-03 20:01:16 UTC
(In reply to comment #0)
> net-misc/cisco-vpnclient-3des-4.8.00.0490-r1 installs and starts without a
> problem.ic
> 
> It also connects to the VPN server without a problem. Connectivity can be
> verified through ping. The system remains stable as long as the network is not
> used.
> 
> However, a network traffic crashes it - computer completely locks up and the
> caps led start blinking. The system does not respond to the keyboard or the
> mouse until a hard reboot is done.

I had the same problem with newest version in portage - upgrading (to newer version, not yet in portage) solved it for me.
There you will find a working ebuild and a patch, attached by me, maybe you could try out if these two files solve the problem for you too: http://bugs.gentoo.org/show_bug.cgi?id=234361
Comment 9 Andreas Simon 2008-11-08 17:32:11 UTC
(In reply to comment #8)
> upgrading (to newer
> version, not yet in portage) solved it for me.

Well, that was an error, the problem wasn't solved. I'm still having lockups, even with the newer version.
Comment 10 Marian Kyral 2009-07-16 14:16:34 UTC
(In reply to comment #9)
> (In reply to comment #8)
> > upgrading (to newer
> > version, not yet in portage) solved it for me.
> 
> Well, that was an error, the problem wasn't solved. I'm still having lockups,
> even with the newer version.
> 

I have the same problem. It started after update kernel to 2.6.30. It works correctly with 2.6.29.

Upgrading cisco-vpnclient-3des to 4.8.02.0030 does not help.


Comment 11 Humberto Gamez 2009-09-16 00:18:56 UTC
the new vpn client doesnt work for me... Do you know any workaround?

Regards,

tuxeto ~ # emerge --info
Portage 2.1.6.13 (!../usr/portage/profiles/default/linux/x86/2008.0, gcc-4.3.2, glibc-2.10.1-r0, 2.6.30-gentoo-r6 i686)
=================================================================
System uname: Linux-2.6.30-gentoo-r6-i686-Genuine_Intel-R-_CPU_T2400_@_1.83GHz-with-gentoo-2.0.1
Timestamp of tree: Thu, 03 Sep 2009 05:30:01 +0000
ccache version 2.4 [enabled]
app-shells/bash:     4.0_p28
dev-lang/python:     2.6.2-r1, 3.1.1
dev-util/ccache:     2.4-r8
dev-util/cmake:      2.6.4-r2
sys-apps/baselayout: 2.0.1
sys-apps/openrc:     0.4.3-r3
sys-apps/sandbox:    2.1
sys-devel/autoconf:  2.13, 2.63-r1
sys-devel/automake:  1.10.2, 1.11
sys-devel/binutils:  2.19.1-r1
sys-devel/gcc-config: 1.4.1
sys-devel/libtool:   2.2.6a
virtual/os-headers:  2.6.30-r1
ACCEPT_KEYWORDS="x86 ~x86"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-march=prescott -O2 -pipe -msse3 -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo /etc/udev/rules.d"
CXXFLAGS="-O2 -march=i686 -pipe"
DISTDIR="/home/hgamez/portage/distfiles"
FEATURES="autoaddcvs ccache distlocks fixpackages parallel-fetch protect-owned sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://chi-10g-1-mirror.fastsoft.net/pub/linux/gentoo/gentoo-distfiles/ http://gentoo.mirrors.pair.com/ ftp://chi-10g-1-mirror.fastsoft.net/pub/linux/gentoo/gentoo-distfiles/ ftp://mirror.csclub.uwaterloo.ca/gentoo-distfiles/"
LDFLAGS="-Wl,-O1"
MAKEOPTS="-j3"
PKGDIR="/home/hgamez/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/home/hgamez/tmp"
PORTDIR="/home/hgamez/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X aac acl alsa aoss asf berkdb bzip2 cairo cdr cli consolekit cracklib crypt cups dbus dns dri dvd dvdr exchange fam firefox fortran gdbm gif glitz gnome gnome-keyring gpm gstreamer gtk hal iconv isdnlog jpeg kerberos ldap mad mp3 mp4 mudflap ncurses new-login nls nptl nptlonly nsplugin openmp pam pcre pdf perl png pppd python readline reflection samba sdl session sip spell spl sqlite ssl svg symlink sysfs tcpd threads tiff truetype unicode vidix wav win32codecs wpa_supplicant x264 x86 xcomposite xinerama xml xorg xscreensaver xv xvid zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1 emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" ELIBC="glibc" INPUT_DEVICES="keyboard mouse synaptics evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" USERLAND="GNU" VIDEO_CARDS="vesa radeon"
Unset:  CPPFLAGS, CTARGET, EMERGE_DEFAULT_OPTS, FFLAGS, INSTALL_MASK, LANG, LC_ALL, LINGUAS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, PORTDIR_OVERLAY

tuxeto ~ # emerge -s vpnclient
Searching...   
[ Results for search key : vpnclient ]
[ Applications found : 1 ]
 
*  net-misc/cisco-vpnclient-3des
      Latest version available: 4.8.02.0030
      Latest version installed: 4.8.02.0030
      Size of files: 2,001 kB
      Homepage:      http://cco.cisco.com/en/US/products/sw/secursw/ps2308/index.html
      Description:   Cisco VPN Client (3DES)
      License:       cisco-vpn-client

tuxeto ~ #
Comment 12 Marian Kyral 2009-09-16 05:31:36 UTC
I tried vpnc and it worked in my case.

[I] net-misc/vpnc
     Available versions:  0.5.3 {bindist hybrid-auth resolvconf}
     Installed versions:  0.5.3(08:07:01 14.9.2009)(-bindist -hybrid-auth -resolvconf)
     Homepage:            http://www.unix-ag.uni-kl.de/~massar/vpnc/
     Description:         Free client for Cisco VPN routing software
Comment 13 Martin Mokrejš 2010-09-03 07:32:50 UTC
For me on 2.6.27.52 the version 4.8.00.0490-r1 does not work at all (I do not get the Username prompt whereas with 4.8.01.0640 I do (but loosing connections and the rtl8139 drivr complains a lot, for details see
https://bugzilla.kernel.org/show_bug.cgi?id=17652).

Finally, with 4.8.02.0030-r1 on 2.6.31.14 my computer locks up completely in few seconds to few minutes (keyboard leds flashing).
Comment 14 Pacho Ramos gentoo-dev 2012-02-12 11:11:01 UTC
+*cisco-vpnclient-3des-4.8.02.0030 (12 Feb 2012)
+
+  12 Feb 2012; Pacho Ramos <pacho@gentoo.org>
+  +cisco-vpnclient-3des-4.8.02.0030.ebuild, +files/4.8.02.0030-GenDefs.h.patch,
+  +files/4.8.02.0030-Makefile.patch, +files/4.8.02.0030-autoconf.patch,
+  +files/4.8.02.0030-frag.c.patch, +files/4.8.02.0030-interceptor.c.patch,
+  +files/4.8.02.0030-linuxcniapi.c.patch,
+  +files/4.8.02.0030-linuxcniapi.h.patch,
+  +files/4.8.02.0030-linuxkernelapi.c.patch,
+  -cisco-vpnclient-3des-4.8.01.0640.ebuild:
+  Version bump, thanks a lot to  Rolando J. Zappacosta, Andreas Simon, Andrea
+  Postiglione, Matthew Schultz, JTRiley. Drop old.
+