Page MenuHomeFreeBSD

D22368.diff
No OneTemporary

D22368.diff

Index: sys/netipsec/xform_ah.c
===================================================================
--- sys/netipsec/xform_ah.c
+++ sys/netipsec/xform_ah.c
@@ -926,7 +926,9 @@
/* Insert packet replay counter, as requested. */
SECASVAR_LOCK(sav);
if (sav->replay) {
- if (sav->replay->count == ~0 &&
+ if ((sav->replay->count == ~0 ||
+ (!(sav->flags & SADB_X_SAFLAGS_ESN) &&
+ ((uint32_t)sav->replay->count) == ~0)) &&
(sav->flags & SADB_X_EXT_CYCSEQ) == 0) {
SECASVAR_UNLOCK(sav);
DPRINTF(("%s: replay counter wrapped for SA %s/%08lx\n",

File Metadata

Mime Type
text/plain
Expires
Fri, Jan 24, 9:01 PM (20 h, 33 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
16103403
Default Alt Text
D22368.diff (572 B)

Event Timeline