diff options
author | Martin Willi <martin@revosec.ch> | 2013-09-04 17:12:23 +0200 |
---|---|---|
committer | Martin Willi <martin@revosec.ch> | 2013-09-13 13:56:43 +0200 |
commit | 96136a12298e0804e8bd5f5b2d2d68e508da9810 (patch) | |
tree | d872b7946604db44b7bf9994144cf72ad769c88a /src/libhydra/plugins/resolve/resolve_handler.c | |
parent | 791fde166998fa1f48c837576ec155e38bcdd1be (diff) | |
download | strongswan-96136a12298e0804e8bd5f5b2d2d68e508da9810.tar.bz2 strongswan-96136a12298e0804e8bd5f5b2d2d68e508da9810.tar.xz |
libipsec: check for a policy with the reqid of the SA on decapsulation
To prevent a client from sending a packet with a source address of a different
client, we require a policy bound via reqid to the decapsulating SA.
Diffstat (limited to 'src/libhydra/plugins/resolve/resolve_handler.c')
0 files changed, 0 insertions, 0 deletions