Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 02 Nov 2000 17:52:41 -0800
From:      Lars Eggert <larse@ISI.EDU>
To:        stable@freebsd.org, rwatson@freebsd.org, touch@ISI.EDU
Subject:   bugfix from KAME sys/296 before code freeze?
Message-ID:  <3A021A69.8AC39AE2@isi.edu>

next in thread | raw e-mail | index | archive | help

[-- Attachment #1 --]
Any chance to get a bug fix to KAME (see KAME PR sys/296 at
http://orange.kame.net/dev/query-pr.cgi?pr=296) into -STABLE before the
code freeze? It's required for correct operation of the X-Bone port.

It's an extremely small change that fixes a problem where IPsec transport
mode packets that go over an IPIP tunnel are incorrectly classifies as
IPsec tunnel mode packets by KAME.

--- ipsec.c     Mon Oct 23 12:58:50 2000
      +++ ipsec.c.new Mon Oct 23 12:57:01 2000
      @@ -3200,6 +3200,8 @@
       
              if (nxt != IPPROTO_IPV4)
                      return 0;
      +       if (sav->sah->saidx.mode == IPSEC_MODE_TRANSPORT)
      +               return 0;
       #ifdef _IP_VHL
              hlen = _IP_VHL_HL(ip->ip_vhl) << 2;
       #else
      @@ -3238,6 +3240,8 @@
       
              if (nxt != IPPROTO_IPV6)
                      return 0;
      +       if (sav->sah->saidx.mode == IPSEC_MODE_TRANSPORT)
      +               return 0;
              switch (((struct sockaddr *)&sav->sah->saidx.dst)->sa_family)
{
              case AF_INET6:
                      sin6 = ((struct sockaddr_in6 *)&sav->sah->saidx.dst);

-- 
Lars Eggert <larse@isi.edu>                 Information Sciences Institute
http://www.isi.edu/larse/                University of Southern California
[-- Attachment #2 --]
0#	*H
010	+0	*H
00A#0
	*H
010	UZA10UWestern Cape10UDurbanville10
U
Thawte10UCertificate Services1(0&UPersonal Freemail RSA 1999.9.160
000824203008Z
010824203008Z0T10
UEggert1
0U*Lars10ULars Eggert10	*H
	
larse@isi.edu00
	*H
0\p9޻ H;v֐r∩6"C?mxfJf7I[3CF́L	I
-zHRVA怤2]0-bL)%X>nӅw0u0*+e!000L2uMyffBNUbNJJcdZ2s0U0
larse@isi.edu0U00U#0`fUXFa#Ì0
	*H
_3	F=%nWY-HXD9UOc6ܰwf@uܶNԄR?Pr}E1֮23mFhySwM_h|d yR=$P 00}0
	*H
010	UZA10UWestern Cape10U	Cape Town10U
Thawte Consulting1(0&UCertification Services Division1$0"UThawte Personal Freemail CA1+0)	*H
	personal-freemail@thawte.com0
990916140140Z
010915140140Z010	UZA10UWestern Cape10UDurbanville10
U
Thawte10UCertificate Services1(0&UPersonal Freemail RSA 1999.9.1600
	*H
0iZz]!#rLK~r$BRW{azr98e^eyvL>hput,O	1ArƦ]D.Mօ>lx~@эWs0FO7050U00U#0rIs4Uvr~wƲ0
	*H
kY1rr`HU{gapm¥7؝(V\uoƑlfq|ko!6-	-mƃRt\~
orzg,ksnΝc)	~U100010	UZA10UWestern Cape10UDurbanville10
U
Thawte10UCertificate Services1(0&UPersonal Freemail RSA 1999.9.16#0	+0	*H
	1	*H
0	*H
	1
001103015241Z0#	*H
	1VxW*zd"j0R	*H
	1E0C0
*H
0*H
0+0
*H
@0
*H
(0
	*H
)\e'h[.w9<!Ȼ;lod~r1m,һ)!8OH=WE	;֜ajuש6u9<]fE%W"-T͇9(

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3A021A69.8AC39AE2>