denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Reset the encrypted flag when handling IKE messages that contain a fragment

Browse Source 
Racoon sets the encrypted bit for messages containing a fragment, but these
messages are not really encrypted (the fragmented message is though).
This commit is contained in:
Tobias Brunner
2012-12-24 10:24:48 +01:00
parent 8f0ab6dd36
commit ddfad8b67e
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/encoding/message.c
+6
View File
@@ -1693,6 +1693,12 @@ METHOD(message_t, parse_header, status_t,
} }
this->first_payload = ike_header->payload_interface.get_next_type( this->first_payload = ike_header->payload_interface.get_next_type(
&ike_header->payload_interface); &ike_header->payload_interface);
if (this->first_payload == FRAGMENT_V1 && this->is_encrypted)
{ /* racoon sets the encryted bit when sending a fragment, but these
* messages are really not encrypted */
this->is_encrypted = FALSE;
}
for (i = 0; i < countof(this->reserved); i++) for (i = 0; i < countof(this->reserved); i++)
{ {
reserved = payload_get_field(&ike_header->payload_interface, reserved = payload_get_field(&ike_header->payload_interface,