]> git.ipfire.org Git - thirdparty/strongswan.git/commitdiff
kernel-wfp: Use new UDP ports in update_sa()
authorTobias Brunner <tobias@strongswan.org>
Thu, 3 Feb 2022 16:08:58 +0000 (17:08 +0100)
committerTobias Brunner <tobias@strongswan.org>
Thu, 14 Apr 2022 16:42:01 +0000 (18:42 +0200)
src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c

index 650e046208c32b8307ae255d7e9e6f99d9148737..b4673ee24e7493a78fc30e9cd8231016eb1d01e6 100644 (file)
@@ -2226,8 +2226,8 @@ METHOD(kernel_ipsec_t, update_sa, status_t,
        {
                /* inbound entry, do update */
                sa_id = entry->sa_id;
-               ports.localUdpEncapPort = entry->local->get_port(entry->local);
-               ports.remoteUdpEncapPort = entry->remote->get_port(entry->remote);
+               ports.localUdpEncapPort = data->new_dst->get_port(data->new_dst);
+               ports.remoteUdpEncapPort = data->new_src->get_port(data->new_src);
        }
        this->mutex->unlock(this->mutex);