diff options
| author | Herbert Xu <herbert@gondor.apana.org.au> | 2003-07-12 10:33:36 -0700 |
|---|---|---|
| committer | David S. Miller <davem@nuts.ninka.net> | 2003-07-12 10:33:36 -0700 |
| commit | d4cef02ef663223b3d779cebb457a5cc898e7d8c (patch) | |
| tree | b16f4af26096da66b2c1cedd83154c544af5ec39 | |
| parent | 1b4e3e1db6114d919a0d15fbf7dfcdec93ee8ca8 (diff) | |
[IPSEC]: Missing reqid check in xfrm_state_ok.
| -rw-r--r-- | net/xfrm/xfrm_policy.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/xfrm/xfrm_policy.c b/net/xfrm/xfrm_policy.c index dcfd387ab328..45774f24940c 100644 --- a/net/xfrm/xfrm_policy.c +++ b/net/xfrm/xfrm_policy.c @@ -855,6 +855,7 @@ xfrm_state_ok(struct xfrm_tmpl *tmpl, struct xfrm_state *x, { return x->id.proto == tmpl->id.proto && (x->id.spi == tmpl->id.spi || !tmpl->id.spi) && + (x->props.reqid == tmpl->reqid || !tmpl->reqid) && x->props.mode == tmpl->mode && (tmpl->aalgos & (1<<x->props.aalgo)) && !(x->props.mode && xfrm_state_addr_cmp(tmpl, x, family)); |