denozord/strongswan-ext
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ike: Do not cache MID of IKEv2 fragments

Browse Source 
This fails if there are unencrypted payloads before an encrypted
fragment payload in the first fragment.
This commit is contained in:
Tobias Brunner committed 2014-10-10 09:32:41 +02:00
1 parent c0f4936a23
commit 7a53fe5511
1 file changed
+3 -2
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/sa/ike_sa_manager.c
+3 -2
View File
@@ -1302,8 +1302,9 @@ METHOD(ike_sa_manager_t, checkout_by_message, ike_sa_t*,
ike_id = entry->ike_sa->get_id(entry->ike_sa);
entry->checked_out = TRUE;
if (message->get_first_payload_type(message) != PLV1_FRAGMENT)
{
if (message->get_first_payload_type(message) != PLV1_FRAGMENT &&
message->get_first_payload_type(message) != PLV2_FRAGMENT)
{ /* TODO-FRAG: this fails if there are unencrypted payloads */
entry->processing = get_message_id_or_hash(message);
}
if (ike_id->get_responder_spi(ike_id) == 0)