From: Tobias Brunner <tobias@strongswan.org>
Date: Thu, 3 Feb 2022 16:08:58 +0000 (+0100)
Subject: kernel-wfp: Use new UDP ports in update_sa()
X-Git-Tag: 5.9.6rc1~3^2~19
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=1f060357f4f580401b677d615b4badb1470c48be;p=thirdparty%2Fstrongswan.git

kernel-wfp: Use new UDP ports in update_sa()
---

diff --git a/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c b/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c
index 650e046208..b4673ee24e 100644
--- a/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c
+++ b/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c
@@ -2226,8 +2226,8 @@ METHOD(kernel_ipsec_t, update_sa, status_t,
 	{
 		/* inbound entry, do update */
 		sa_id = entry->sa_id;
-		ports.localUdpEncapPort = entry->local->get_port(entry->local);
-		ports.remoteUdpEncapPort = entry->remote->get_port(entry->remote);
+		ports.localUdpEncapPort = data->new_dst->get_port(data->new_dst);
+		ports.remoteUdpEncapPort = data->new_src->get_port(data->new_src);
 	}
 	this->mutex->unlock(this->mutex);