denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

libipsec: remove extra RFC4303 TFC padding appended to inner payload

Browse Source
This commit is contained in:
Martin Willi
2013-10-11 10:23:17 +02:00
parent d53f9b9637
commit 293515f95c
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libipsec/ip_packet.c
+6
View File
@@ -139,6 +139,9 @@ ip_packet_t *ip_packet_create(chunk_t packet)
goto failed; goto failed;
} }
ip = (struct ip*)packet.ptr; ip = (struct ip*)packet.ptr;
/* remove any RFC 4303 TFC extra padding */
packet.len = min(packet.len, untoh16(&ip->ip_len));
src = host_create_from_chunk(AF_INET, src = host_create_from_chunk(AF_INET,
chunk_from_thing(ip->ip_src), 0); chunk_from_thing(ip->ip_src), 0);
dst = host_create_from_chunk(AF_INET, dst = host_create_from_chunk(AF_INET,
@@ -157,6 +160,9 @@ ip_packet_t *ip_packet_create(chunk_t packet)
goto failed; goto failed;
} }
ip = (struct ip6_hdr*)packet.ptr; ip = (struct ip6_hdr*)packet.ptr;
/* remove any RFC 4303 TFC extra padding */
packet.len = min(packet.len, untoh16(&ip->ip6_plen));
src = host_create_from_chunk(AF_INET6, src = host_create_from_chunk(AF_INET6,
chunk_from_thing(ip->ip6_src), 0); chunk_from_thing(ip->ip6_src), 0);
dst = host_create_from_chunk(AF_INET6, dst = host_create_from_chunk(AF_INET6,