[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(usagi-users 02877) ipsec minor bug



hi,
i tried ipsec, but a minor problem found.

# setkey -D
fec0::100 fec0::101 
	esp mode=transport spi=1025(0x00000401) reqid=0(0x00000000)
	E: twofish-cbc  cd1b8f20 08e68360 295ed24a bef68a54
	seq=0x00000000 replay=0 flags=0x00000000 state=mature 
	created: Apr  1 22:07:41 2004	current: Apr  1 22:29:42 2004
	diff: 1321(s)	hard: 0(s)	soft: 0(s)
	last: Apr  1 22:10:14 2004	hard: 0(s)	soft: 0(s)
	current: 672(bytes)	hard: 0(bytes)	soft: 0(bytes)
	allocated: 2	hard: 0	soft: 0
	sadb_seq=0 pid=688 refcnt=0

above seq=0x00000000 did not count up.
following patch may come along ok.
thanks.

--- linux26/net/key/af_key.c.org	2004-03-20 14:20:29.000000000 +0000
+++ linux26/net/key/af_key.c	2004-04-01 22:23:41.000000000 +0900
@@ -859,7 +859,7 @@
 	sa2->sadb_x_sa2_mode = x->props.mode + 1;
 	sa2->sadb_x_sa2_reserved1 = 0;
 	sa2->sadb_x_sa2_reserved2 = 0;
-	sa2->sadb_x_sa2_sequence = 0;
+	sa2->sadb_x_sa2_sequence = x->replay.seq;
 	sa2->sadb_x_sa2_reqid = x->props.reqid;
 
 	if (natt && natt->encap_type) {