From: Martin Willi <martin@revosec.ch>
Date: Tue, 22 Jun 2010 07:16:04 +0000 (+0200)
Subject: Ignore IKEv2 packets in pluto with any minor version
X-Git-Tag: 4.4.1~150
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=5d31217232ff1cc9237df1d47796f7866072f6be;p=thirdparty%2Fstrongswan.git

Ignore IKEv2 packets in pluto with any minor version
---

diff --git a/src/pluto/demux.c b/src/pluto/demux.c
index fad1450cdb..617353c6ca 100644
--- a/src/pluto/demux.c
+++ b/src/pluto/demux.c
@@ -1215,7 +1215,7 @@ read_packet(struct msg_digest *md)
 
 	/* ignore IKEv2 packets - they will be handled by charon */
 	if (pbs_room(&md->packet_pbs) > IKEV2_VERSION_OFFSET
-	&&  md->packet_pbs.start[IKEV2_VERSION_OFFSET] == IKEV2_VERSION)
+	&&  (md->packet_pbs.start[IKEV2_VERSION_OFFSET] & 0xF0) == IKEV2_VERSION)
 	{
 		DBG(DBG_CONTROLMORE,
 			DBG_log("  ignoring IKEv2 packet")