]> git.baikalelectronics.ru Git - kernel.git/commit
[IPSEC]: Reject packets within replay window but outside the bit mask
authorHerbert Xu <herbert@gondor.apana.org.au>
Thu, 5 Apr 2007 07:07:39 +0000 (00:07 -0700)
committerDavid S. Miller <davem@davemloft.net>
Thu, 5 Apr 2007 07:07:39 +0000 (00:07 -0700)
commitbba7c9b5b33914f5ae5c270ff0b4f96a103ea332
tree432e2d46513ddb61b0da9da14410b6888c947b70
parentd7dacdc788afc9b00a2118ccf10f221006b0dbfe
[IPSEC]: Reject packets within replay window but outside the bit mask

Up until this point we've accepted replay window settings greater than
32 but our bit mask can only accomodate 32 packets.  Thus any packet
with a sequence number within the window but outside the bit mask would
be accepted.

This patch causes those packets to be rejected instead.

Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/xfrm/xfrm_state.c