kernel-netlink: Ignore deprecated candidate source addresses

The currently used address may get deprecated e.g. if an IPv6 prefix changes.
In this case we should switch to another address.

Fixes #3511.

diff --git a/src/libcharon/plugins/kernel_netlink/kernel_netlink_net.c b/src/libcharon/plugins/kernel_netlink/kernel_netlink_net.c
index 57a26b7deb8a0246be3fd2b7454e138fb5822d89..8d53326ea015eb6f89ba5042715e439d2ea19048 100644 (file)
--- a/src/libcharon/plugins/kernel_netlink/kernel_netlink_net.c
+++ b/src/libcharon/plugins/kernel_netlink/kernel_netlink_net.c
@@ -942,8 +942,9 @@ static host_t *get_matching_address(private_kernel_netlink_net_t *this,
                                {       /* optionally match a subnet */
                                        continue;
                                }
-                               if (candidate && candidate->ip_equals(candidate, addr->ip))
-                               {       /* stop if we find the candidate */
+                               if (candidate && candidate->ip_equals(candidate, addr->ip) &&
+                                       !(addr->flags & IFA_F_DEPRECATED))
+                               {       /* stop if we find the candidate and it's not deprecated */
                                        best = addr;
                                        candidate_matched = TRUE;
                                        break;