denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

kernel-netlink: Update family in SA selector if addresses change

Browse Source
This commit is contained in:
Tobias Brunner
2026-04-16 15:33:25 +02:00
parent e1a11e2c1c
commit cb27593ce0
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c
+3
View File
@@ -2723,6 +2723,9 @@ METHOD(kernel_ipsec_t, update_sa, status_t,
{ {
ts->set_address(ts, data->new_dst); ts->set_address(ts, data->new_dst);
ts2subnet(ts, &sa->sel.daddr, &sa->sel.prefixlen_d); ts2subnet(ts, &sa->sel.daddr, &sa->sel.prefixlen_d);
/* can't set this for src, otherwise selector2ts() will fail, but
* if the family changes, both addresses need updating anyway */
sa->sel.family = data->new_dst->get_family(data->new_dst);
} }
DESTROY_IF(ts); DESTROY_IF(ts);
} }