kernel-netlink: Use ipsec_sa_cfg_equals() and compare marks properly

diff --git a/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c b/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c
index add4761f6089950ed0d42ec726c7b49d3db759ad..ab896a4ae3baca3524c35c15ccbf2c534abc4707 100644 (file)
--- a/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c
+++ b/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c
@@ -414,8 +414,9 @@ static bool ipsec_sa_equals(ipsec_sa_t *sa, ipsec_sa_t *other_sa)
 {
        return sa->src->ip_equals(sa->src, other_sa->src) &&
                   sa->dst->ip_equals(sa->dst, other_sa->dst) &&
-                  memeq(&sa->mark, &other_sa->mark, sizeof(mark_t)) &&
-                  memeq(&sa->cfg, &other_sa->cfg, sizeof(ipsec_sa_cfg_t));
+                  sa->mark.value == other_sa->mark.value &&
+                  sa->mark.mask == other_sa->mark.mask &&
+                  ipsec_sa_cfg_equals(&sa->cfg, &other_sa->cfg);
 }
 
 /**