New commits:
commit 0fc6344b4b6eb949ea5e700c01125a93f0ac612a
Author: Andrew Cagney <[email protected]>
Date:   Wed Feb 7 16:31:54 2018 -0500

    ikev2: if an SA_INIT reply has not matching state, drop it
    
    Seeing as our end created the the state before sending the request
    being replied to.
    
    Also check IKE_I vs MSG_R and message ID are sane.
    
    Replies with no state were bumbling their way through the FSM lookup
    and then only dropped when that failed.

_______________________________________________
Swan-commit mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-commit

Reply via email to