]> git.ipfire.org Git - thirdparty/strongswan.git/commit
ike: Fix untracking IKE_SA_INITs with non-zero MIDs and SPIs as half-open SAs
authorTobias Brunner <tobias@strongswan.org>
Wed, 5 Jul 2023 08:41:11 +0000 (10:41 +0200)
committerTobias Brunner <tobias@strongswan.org>
Wed, 26 Jul 2023 13:13:43 +0000 (15:13 +0200)
commit0b4735709189f9f3b20f64bce4f38211527fff5b
tree92226a901c9555e9def47476f04bd1d8d9114e72
parent849c2c9707e00fc5210bd389631a2fc1a97089e6
ike: Fix untracking IKE_SA_INITs with non-zero MIDs and SPIs as half-open SAs

We track all IKE_SA_INIT requests as half-open IKE_SAs but didn't
correctly untrack them if their message ID or responder SPI was non-zero.

References strongswan/strongswan#1775

Fixes: b866ee88bf54 ("ike: Track unprocessed initial IKE messages like half-open IKE_SAs")
src/libcharon/sa/ike_sa_manager.c