strongswan/strongswan-4.4.1-fix_notify_error_range.patch
Marius Tomaschewski 5bcad554c1 - Disabled sqlite plugin on SLE-10 -- sqlite3 lib is too old there.
- Applied patch by Jiri Bohac fixing error-type range in parsing of
  NOTIFY payloads (RFC 4306, section 3.10.1).

OBS-URL: https://build.opensuse.org/package/show/network:vpn/strongswan?expand=0&rev=19
2010-08-10 11:47:44 +00:00

23 lines
677 B
Diff

From 30d8e8d04d132e046a19b6a29439e6efb8ff3e06 Mon Sep 17 00:00:00 2001
From: Jiri Bohac <jbohac@suse.cz>
Date: Thu, 5 Aug 2010 17:13:38 +0200
Subject: [PATCH] fix error-type range in parsing of NOTIFY payloads
diff --git a/src/libcharon/sa/tasks/ike_init.c b/src/libcharon/sa/tasks/ike_init.c
index 38fb572..dd4a5f5 100644
--- a/src/libcharon/sa/tasks/ike_init.c
+++ b/src/libcharon/sa/tasks/ike_init.c
@@ -468,7 +468,7 @@ static status_t process_i(private_ike_init_t *this, message_t *message)
}
default:
{
- if (type < 16383)
+ if (type <= 16383)
{
DBG1(DBG_IKE, "received %N notify error",
notify_type_names, type);
--
1.7.1