denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Include source port in init hash for fragmented messages

Browse Source
This commit is contained in:
Tobias Brunner
2012-12-24 12:29:31 +01:00
parent 2f62bb1549
commit e645c15b9c
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ike_sa_manager.c
+8 -1
View File
@@ -975,7 +975,8 @@ static bool get_init_hash(private_ike_sa_manager_t *this, message_t *message,
return FALSE; return FALSE;
} }
if (message->get_first_payload_type(message) == FRAGMENT_V1) if (message->get_first_payload_type(message) == FRAGMENT_V1)
{ /* only hash the source IP and SPI for fragmented init messages */ { /* only hash the source IP, port and SPI for fragmented init messages */
u_int16_t port;
u_int64_t spi; u_int64_t spi;
src = message->get_source(message); src = message->get_source(message);
@@ -984,6 +985,12 @@ static bool get_init_hash(private_ike_sa_manager_t *this, message_t *message,
{ {
return FALSE; return FALSE;
} }
port = src->get_port(src);
if (!this->hasher->allocate_hash(this->hasher,
chunk_from_thing(port), NULL))
{
return FALSE;
}
spi = message->get_initiator_spi(message); spi = message->get_initiator_spi(message);
return this->hasher->allocate_hash(this->hasher, return this->hasher->allocate_hash(this->hasher,
chunk_from_thing(spi), hash); chunk_from_thing(spi), hash);