kernel-pfkey: Fix extended replay configuration on FreeBSD 11.1

Fixes: 88a8fba1c76e ("kernel-pfkey: Support anti-replay windows > 2k")
Fixes #2501.

diff --git a/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c b/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
index 710107889fca3ccb3ac0944499921a449aac4f68..79abe587a49bdbbeea76bd11354f067ab96f3e9b 100644 (file)
--- a/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
+++ b/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
@@ -1752,13 +1752,13 @@ METHOD(kernel_ipsec_t, add_sa, status_t,
 #ifdef SADB_X_EXT_SA_REPLAY
        if (data->inbound)
        {
-               struct sadb_x_sa_replay *replay;
+               struct sadb_x_sa_replay *repl;
 
-               replay = (struct sadb_x_sa_replay*)PFKEY_EXT_ADD_NEXT(msg);
-               replay->sadb_x_replay_exttype = SADB_X_EXT_SA_REPLAY;
-               replay->sadb_x_replay_len = PFKEY_LEN(sizeof(struct sadb_x_sa_replay));
-               replay->sadb_x_replay_replay = min(data->replay_window, UINT32_MAX-32);
-               PFKEY_EXT_ADD(msg, replay);
+               repl = (struct sadb_x_sa_replay*)PFKEY_EXT_ADD_NEXT(msg);
+               repl->sadb_x_sa_replay_exttype = SADB_X_EXT_SA_REPLAY;
+               repl->sadb_x_sa_replay_len = PFKEY_LEN(sizeof(struct sadb_x_sa_replay));
+               repl->sadb_x_sa_replay_replay = min(data->replay_window, UINT32_MAX-32);
+               PFKEY_EXT_ADD(msg, repl);
        }
 #endif