Don't reject OPAQUE ports while verifying traffic selector substructure

2013-02-21 11:52:33 +01:00
parent 0abeac3a0b
commit b443fa6123
1 changed files with 5 additions and 1 deletions
@@ -113,9 +113,13 @@ METHOD(payload_t, verify, status_t,
 	private_traffic_selector_substructure_t *this)
 {
 	if (this->start_port > this->end_port)
+	{
+		/* OPAQUE ports are the only exception */
+		if (this->start_port != 0xffff && this->end_port != 0)
 		{
 			return FAILED;
 		}
+	}
 	switch (this->ts_type)
 	{
 		case TS_IPV4_ADDR_RANGE: