denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kernel-netlink: Ignore deprecated candidate source addresses

Browse Source 
The currently used address may get deprecated e.g. if an IPv6 prefix changes.
In this case we should switch to another address.

Fixes #3511.
This commit is contained in:
Tobias Brunner
2020-10-29 09:46:14 +01:00
parent 2eb43ca405
commit a689e358e5
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/kernel_netlink/kernel_netlink_net.c
+3 -2
View File
@@ -942,8 +942,9 @@ static host_t *get_matching_address(private_kernel_netlink_net_t *this,
{ /* optionally match a subnet */ { /* optionally match a subnet */
continue; continue;
} }
if (candidate && candidate->ip_equals(candidate, addr->ip)) if (candidate && candidate->ip_equals(candidate, addr->ip) &&
{ /* stop if we find the candidate */ !(addr->flags & IFA_F_DEPRECATED))
{ /* stop if we find the candidate and it's not deprecated */
best = addr; best = addr;
candidate_matched = TRUE; candidate_matched = TRUE;
break; break;