D22368.diff
No OneTemporary
Actions

Size

572 B

Referenced Files

None

Subscribers

None

D22368.diff
View Options

	Index: sys/netipsec/xform_ah.c
	===================================================================
	--- sys/netipsec/xform_ah.c
	+++ sys/netipsec/xform_ah.c
	@@ -926,7 +926,9 @@
	/* Insert packet replay counter, as requested. */
	SECASVAR_LOCK(sav);
	if (sav->replay) {
	- if (sav->replay->count == ~0 &&
	+ if ((sav->replay->count == ~0 \|\|
	+ (!(sav->flags & SADB_X_SAFLAGS_ESN) &&
	+ ((uint32_t)sav->replay->count) == ~0)) &&
	(sav->flags & SADB_X_EXT_CYCSEQ) == 0) {
	SECASVAR_UNLOCK(sav);
	DPRINTF(("%s: replay counter wrapped for SA %s/%08lx\n",