[Openswan dev] Small patches

Herbert Xu herbert at gondor.apana.org.au
Thu Jan 27 12:37:28 CET 2005


Ulrich Weber <uweber at astaro.de> wrote:
> 
> diff -Nru openswan-2.2.0.org/programs/pluto/kernel_netlink.c openswan-2.2.0/programs/pluto/kernel_netlink.c
> --- openswan-2.2.0.org/programs/pluto/kernel_netlink.c  2004-12-01 09:38:26.000000000 +0100
> +++ openswan-2.2.0/programs/pluto/kernel_netlink.c      2005-01-26 17:25:28.000000000 +0100
> @@ -588,7 +588,7 @@
>     req.p.id.proto = satype2proto(sa->satype);
>     req.p.family = sa->src->u.v4.sin_family;
>     req.p.mode = (sa->encapsulation == ENCAPSULATION_MODE_TUNNEL);
> -    req.p.replay_window = sa->replay_window;
> +    req.p.replay_window = 32;
>     req.p.reqid = sa->reqid;
>     req.p.lft.soft_byte_limit = XFRM_INF;
>     req.p.lft.soft_packet_limit = XFRM_INF;

Well caught.  Since sa->replay_window is never actually set by the user,
what about removing it from the sa structure altogether and just setting
it in kernel_*.c?

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert at gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt


More information about the Dev mailing list