New commits:
commit 0e00374e130f1d74b8472dab56d481db69fdc177
Author: Andrew Cagney <[email protected]>
Date:   Thu Nov 22 10:43:38 2018 -0500

    IKEv2: exploit CHILD SA's sharing a hash slot when migrating to a rekeyed 
IKE SA
    
    Rather than search all states for an IKE SA's children, just search
    the IKE SA's hash slot - all children can be found there.
    
    Use FOR_EACH_LIST_ENTRY_NEW2OLD() so the search order is really clear.
    Use rehash_state_cookies_in_db(), no need for log_state() call.
    
    Document that it should probably scrub message counters (but that
    lacks evidence).

_______________________________________________
Swan-commit mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-commit

Reply via email to