denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kernel-pfkey: Fix extended replay configuration on FreeBSD 11.1

Browse Source 
Fixes: 88a8fba1c7 ("kernel-pfkey: Support anti-replay windows > 2k")
Fixes #2501.
This commit is contained in:
Tobias Brunner
2017-12-22 10:19:49 +01:00
parent 6d98bb926e
commit 381f6d982c
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
+6 -6
View File
@@ -1752,13 +1752,13 @@ METHOD(kernel_ipsec_t, add_sa, status_t,
#ifdef SADB_X_EXT_SA_REPLAY #ifdef SADB_X_EXT_SA_REPLAY
if (data->inbound) if (data->inbound)
{ {
struct sadb_x_sa_replay *replay; struct sadb_x_sa_replay *repl;
replay = (struct sadb_x_sa_replay*)PFKEY_EXT_ADD_NEXT(msg); repl = (struct sadb_x_sa_replay*)PFKEY_EXT_ADD_NEXT(msg);
replay->sadb_x_replay_exttype = SADB_X_EXT_SA_REPLAY; repl->sadb_x_sa_replay_exttype = SADB_X_EXT_SA_REPLAY;
replay->sadb_x_replay_len = PFKEY_LEN(sizeof(struct sadb_x_sa_replay)); repl->sadb_x_sa_replay_len = PFKEY_LEN(sizeof(struct sadb_x_sa_replay));
replay->sadb_x_replay_replay = min(data->replay_window, UINT32_MAX-32); repl->sadb_x_sa_replay_replay = min(data->replay_window, UINT32_MAX-32);
PFKEY_EXT_ADD(msg, replay); PFKEY_EXT_ADD(msg, repl);
} }
#endif #endif