denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

stroke: Avoid underflow when reporting number of SAs

Browse Source 
Since 5.9.6, the number of half-open SAs includes queued initial IKE
messages.  So that number could be higher than the number of managed
SAs, which causes an underflow in the output.

Fixes: b866ee88bf ("ike: Track unprocessed initial IKE messages like half-open IKE_SAs")
This commit is contained in:
Tobias Brunner
2026-08-24 16:21:49 +02:00
parent 3b58c67202
commit 2265fcd1b4
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/stroke/stroke_list.c
+2 -3
View File
@@ -645,9 +645,8 @@ METHOD(stroke_list_t, status, void,
half_open = charon->ike_sa_manager->get_half_open_count(
charon->ike_sa_manager, NULL, FALSE);
fprintf(out, "Security Associations (%u up, %u connecting):\n",
charon->ike_sa_manager->get_count(charon->ike_sa_manager) - half_open,
half_open);
fprintf(out, "Security Associations (%u total, %u connecting):\n",
charon->ike_sa_manager->get_count(charon->ike_sa_manager), half_open);
enumerator = charon->controller->create_ike_sa_enumerator(
charon->controller, wait);
while (enumerator->enumerate(enumerator, &ike_sa) && ferror(out) == 0)