ims-volte-vowifi
/
strongswan
9
0
Fork 0
Code Pull Requests Releases Activity

kernel-pfkey: Fix extended replay configuration on FreeBSD 11.1 

Fixes: 88a8fba1c7 ("kernel-pfkey: Support anti-replay windows > 2k")
Fixes #2501.
This commit is contained in:
Tobias Brunner 2017-12-04 10:01:14 +01:00
parent 6d98bb926e
commit 381f6d982c
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
View File

@ -1752,13 +1752,13 @@ METHOD(kernel_ipsec_t, add_sa, status_t,
#ifdef SADB_X_EXT_SA_REPLAY
if (data->inbound)
{
struct sadb_x_sa_replay *replay;
struct sadb_x_sa_replay *repl;
replay = (struct sadb_x_sa_replay*)PFKEY_EXT_ADD_NEXT(msg);
replay->sadb_x_replay_exttype = SADB_X_EXT_SA_REPLAY;
replay->sadb_x_replay_len = PFKEY_LEN(sizeof(struct sadb_x_sa_replay));
replay->sadb_x_replay_replay = min(data->replay_window, UINT32_MAX-32);
PFKEY_EXT_ADD(msg, replay);
repl = (struct sadb_x_sa_replay*)PFKEY_EXT_ADD_NEXT(msg);
repl->sadb_x_sa_replay_exttype = SADB_X_EXT_SA_REPLAY;
repl->sadb_x_sa_replay_len = PFKEY_LEN(sizeof(struct sadb_x_sa_replay));
repl->sadb_x_sa_replay_replay = min(data->replay_window, UINT32_MAX-32);
PFKEY_EXT_ADD(msg, repl);
}
#endif