denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Don't reject OPAQUE ports while verifying traffic selector substructure

Browse Source
This commit is contained in:
Martin Willi
2013-02-21 11:52:33 +01:00
parent 0abeac3a0b
commit b443fa6123
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/encoding/payloads/traffic_selector_substructure.c
+4
View File
@@ -113,9 +113,13 @@ METHOD(payload_t, verify, status_t,
private_traffic_selector_substructure_t *this) private_traffic_selector_substructure_t *this)
{ {
if (this->start_port > this->end_port) if (this->start_port > this->end_port)
{
/* OPAQUE ports are the only exception */
if (this->start_port != 0xffff && this->end_port != 0)
{ {
return FAILED; return FAILED;
} }
}
switch (this->ts_type) switch (this->ts_type)
{ {
case TS_IPV4_ADDR_RANGE: case TS_IPV4_ADDR_RANGE: