ims-volte-vowifi
/
strongswan
9
0
Fork 0
Code Pull Requests Releases Activity
strongswan/src/libipsec
History
Tobias Brunner 6e861947a0 libipsec: Make sure to expire the right SA 
If an IPsec SA is actually replaced with a rekeying its entry in the
manager is freed. That means that when the hard expire is triggered a
new entry might be found at the cached pointer location.  So we have
to make sure we trigger the expire only if we found the right SA.

We could use SPI and addresses for the lookup, but this here requires
a bit less memory and is just a small change. Another option would be to
somehow cancel the queued job, but our scheduler doesn't allow that at
the moment.

Fixes #2399.
 		2017-09-18 10:51:39 +02:00
..
tests Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
Android.mk android: Fix build after updating Linux headers 2015-11-12 14:09:25 +01:00
Makefile.am libipsec: Fix Windows build via MinGW 2017-01-25 17:12:30 +01:00
esp_context.c libipsec: Add support for AES and Camellia in CCM mode 2017-01-25 17:26:45 +01:00
esp_context.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
esp_packet.c libipsec: Fix Windows build via MinGW 2017-01-25 17:12:30 +01:00
esp_packet.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ip_packet.c ip-packet: Correctly determine protocol in fragmented IPv6 packets 2017-09-18 10:28:54 +02:00
ip_packet.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ipsec.c Moved debug.[ch] to utils folder 2012-10-24 16:00:51 +02:00
ipsec.h Added IPsec processor which is responsible for handling in- and outbound packets 2012-08-08 15:41:03 +02:00
ipsec_event_listener.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ipsec_event_relay.c Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ipsec_event_relay.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ipsec_policy.c libipsec: Match IPsec policies against ports of processed packets 2017-03-02 08:27:21 +01:00
ipsec_policy.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ipsec_policy_mgr.c Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ipsec_policy_mgr.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ipsec_processor.c libipsec: Log a packet's ports and protocol in case of a policy mismatch 2017-03-02 08:27:31 +01:00
ipsec_processor.h Added IPsec processor which is responsible for handling in- and outbound packets 2012-08-08 15:41:03 +02:00
ipsec_sa.c Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ipsec_sa.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00
ipsec_sa_mgr.c libipsec: Make sure to expire the right SA 2017-09-18 10:51:39 +02:00
ipsec_sa_mgr.h Use standard unsigned integer types 2016-03-24 18:52:48 +01:00