| commit | 4c4d51a7316b164ba08af61aa0c124a88bc60450 | [log] [tgz] |
|---|---|---|
| author | Herbert Xu <herbert@gondor.apana.org.au> | Thu Apr 05 00:07:39 2007 -0700 |
| committer | David S. Miller <davem@davemloft.net> | Thu Apr 05 00:07:39 2007 -0700 |
| tree | 432e2d46513ddb61b0da9da14410b6888c947b70 | |
| parent | 60e5c166413f17d5ef00b4c1f398dbd44291309a [diff] |
[IPSEC]: Reject packets within replay window but outside the bit mask Up until this point we've accepted replay window settings greater than 32 but our bit mask can only accomodate 32 packets. Thus any packet with a sequence number within the window but outside the bit mask would be accepted. This patch causes those packets to be rejected instead. Signed-off-by: Herbert Xu <herbert@gondor.apana.org.au> Signed-off-by: David S. Miller <davem@davemloft.net>