Ignore IKEv2 packets in pluto with any minor version

diff --git a/src/pluto/demux.c b/src/pluto/demux.c
index fad1450cdb1617a2febc5401e8da77b7511e87c0..617353c6caa5d7ac3eb3cb9bfbf13564be40e5a0 100644 (file)
--- a/src/pluto/demux.c
+++ b/src/pluto/demux.c
@@ -1215,7 +1215,7 @@ read_packet(struct msg_digest *md)
 
        /* ignore IKEv2 packets - they will be handled by charon */
        if (pbs_room(&md->packet_pbs) > IKEV2_VERSION_OFFSET
-       &&  md->packet_pbs.start[IKEV2_VERSION_OFFSET] == IKEV2_VERSION)
+       &&  (md->packet_pbs.start[IKEV2_VERSION_OFFSET] & 0xF0) == IKEV2_VERSION)
        {
                DBG(DBG_CONTROLMORE,
                        DBG_log("  ignoring IKEv2 packet")