Paul Moore <[EMAIL PROTECTED]> wrote:
>
> If it is a bug, I think the basic fix should be pretty simple, changing the
> above xfrm_output() code to the following:
>
> if (x->type->flags & XFRM_TYPE_REPLAY_PROT) {
> XFRM_SKB_CB(skb)->seq = ++x->replay.oseq;
> + if (x->replay.oseq == 0)
> + goto error;
Yes we need this check.
However please add an unlikely around it since it's a 1-in-4
billion event :)
Cheers,
--
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <[EMAIL PROTECTED]>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at http://vger.kernel.org/majordomo-info.html
