Hi: I found that XFRM ALLOCSPI used the selector addresses isntead of the SA addresses when creating the new SA. This patch fixes that. -- Debian GNU/Linux 3.0 is out! ( http://www.debian.org/ ) Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
Index: kernel-source-2.5/net/xfrm/xfrm_user.c =================================================================== RCS file: /home/gondolin/herbert/src/CVS/debian/kernel-source-2.5/net/xfrm/xfrm_user.c,v retrieving revision 1.11 diff -u -r1.11 xfrm_user.c --- kernel-source-2.5/net/xfrm/xfrm_user.c 29 Jul 2003 11:11:34 -0000 1.11 +++ kernel-source-2.5/net/xfrm/xfrm_user.c 3 Aug 2003 00:21:14 -0000 @@ -459,8 +459,8 @@ if (err) goto out_noput; x = xfrm_find_acq(p->info.mode, p->info.reqid, p->info.id.proto, - &p->info.sel.daddr, - &p->info.sel.saddr, 1, + &p->info.id.daddr, + &p->info.saddr, 1, p->info.family); err = -ENOENT; if (x == NULL)
