]> git.ipfire.org Git - thirdparty/strongswan.git/commit
mem-pool: Fix issue with make-before-break reauth and multiple IKE_SAs
authorTobias Brunner <tobias@strongswan.org>
Mon, 30 Sep 2024 10:26:05 +0000 (12:26 +0200)
committerTobias Brunner <tobias@strongswan.org>
Fri, 25 Oct 2024 12:52:46 +0000 (14:52 +0200)
commitd4a0dd9f93d67648eed1ebb223c6cb853101a80a
tree0bf06355f8aab1d6e98b0c1a2d7979ce1b56f121
parentf09b8203d3f919b61570138d2c82d53597e0a9f7
mem-pool: Fix issue with make-before-break reauth and multiple IKE_SAs

If uniqueness checks are disabled and multiple IKE_SAs with the same
identities are created, an offline lease could have gotten reassigned
during a make-before-break reauthentication if such an SA was closed
earlier.  Checking for an online lease for the same client (IP/port)
first ensures that the correct IP is reassigned during the
reauthentication.

References strongswan/strongswan#2472
src/libcharon/attributes/mem_pool.c