diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2017-08-14 16:03:54 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2017-09-18 10:51:39 +0200 |
| commit | 6e861947a018e659a813f08214671d7da32a8463 (patch) | |
| tree | 2b0a2d4b9d2bb2b7715ac2717e50ee16b1903736 /src/libcharon/plugins/kernel_iph/kernel_iph_plugin.c | |
| parent | e138003de9848ac91da3caeba50c059c32ebbab6 (diff) | |
| download | strongswan-6e861947a018e659a813f08214671d7da32a8463.tar.bz2 strongswan-6e861947a018e659a813f08214671d7da32a8463.tar.xz | |
libipsec: Make sure to expire the right SA
If an IPsec SA is actually replaced with a rekeying its entry in the
manager is freed. That means that when the hard expire is triggered a
new entry might be found at the cached pointer location. So we have
to make sure we trigger the expire only if we found the right SA.
We could use SPI and addresses for the lookup, but this here requires
a bit less memory and is just a small change. Another option would be to
somehow cancel the queued job, but our scheduler doesn't allow that at
the moment.
Fixes #2399.
Diffstat (limited to 'src/libcharon/plugins/kernel_iph/kernel_iph_plugin.c')
0 files changed, 0 insertions, 0 deletions