From b62e9a30ce6214aee03a713a9b4d602ad1281c82 Mon Sep 17 00:00:00 2001
From: Andreas Steffen <andreas.steffen@strongswan.org>
Date: Thu, 12 Aug 2010 23:58:29 +0200
Subject: [PATCH] fixed sequence numbering and iv of TLS protection layer

---
 src/libtls/tls_protection.c | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/libtls/tls_protection.c b/src/libtls/tls_protection.c
index 5ea0a8312..51a480858 100644
--- a/src/libtls/tls_protection.c
+++ b/src/libtls/tls_protection.c
@@ -241,8 +241,8 @@ METHOD(tls_protection_t, build, status_t,
 
 				if (this->iv_out.len)
 				{	/* next record IV is last ciphertext block of this record */
-					memcpy(this->iv_out.ptr, data->ptr - this->iv_out.len,
-						   this->iv_out.len);
+					memcpy(this->iv_out.ptr, data->ptr + data->len -
+						   this->iv_out.len, this->iv_out.len);
 				}
 				else
 				{	/* prepend IV */
@@ -254,8 +254,8 @@ METHOD(tls_protection_t, build, status_t,
 				*data = chunk_cat("mm", *data, mac);
 			}
 		}
+		this->seq_out++;
 	}
-	this->seq_out++;
 	return status;
 }