989d921f5d
I'm very pleased to announce the release of our new website and documentation using the new toolchain with Hugo and AsciiDoctor. To get more information about the new toolchain please read the FreeBSD Documentation Project Primer[1], Hugo docs[2] and AsciiDoctor docs[3]. Acknowledgment: Benedict Reuschling <bcr@> Glen Barber <gjb@> Hiroki Sato <hrs@> Li-Wen Hsu <lwhsu@> Sean Chittenden <seanc@> The FreeBSD Foundation [1] https://docs.FreeBSD.org/en/books/fdp-primer/ [2] https://gohugo.io/documentation/ [3] https://docs.asciidoctor.org/home/ Approved by: doceng, core
31 lines
906 B
Diff
31 lines
906 B
Diff
Index: sys/netipsec/xform_esp.c
|
|
===================================================================
|
|
RCS file: /usr/ncvs/src/sys/netipsec/xform_esp.c,v
|
|
retrieving revision 1.11
|
|
diff -u -r1.11 xform_esp.c
|
|
--- sys/netipsec/xform_esp.c 15 Mar 2006 21:11:11 -0000 1.11
|
|
+++ sys/netipsec/xform_esp.c 19 Mar 2006 17:20:07 -0000
|
|
@@ -555,6 +555,23 @@
|
|
*/
|
|
m->m_flags |= M_DECRYPTED;
|
|
|
|
+ /*
|
|
+ * Update replay sequence number, if appropriate.
|
|
+ */
|
|
+ if (sav->replay) {
|
|
+ u_int32_t seq;
|
|
+
|
|
+ m_copydata(m, skip + offsetof(struct newesp, esp_seq),
|
|
+ sizeof (seq), (caddr_t) &seq);
|
|
+ if (ipsec_updatereplay(ntohl(seq), sav)) {
|
|
+ DPRINTF(("%s: packet replay check for %s\n", __func__,
|
|
+ ipsec_logsastr(sav)));
|
|
+ espstat.esps_replay++;
|
|
+ error = ENOBUFS;
|
|
+ goto bad;
|
|
+ }
|
|
+ }
|
|
+
|
|
/* Determine the ESP header length */
|
|
if (sav->flags & SADB_X_EXT_OLD)
|
|
hlen = sizeof (struct esp) + sav->ivlen;
|