[Bug 242606] Low capacity of Variable "IPSEC_MANUAL_REQID_MAX" crashes StrongSwan IPSec/IKEV2 VPN Server

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sat Dec 14 06:00:09 UTC 2019


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=242606

--- Comment #5 from Conrad Meyer <cem at freebsd.org> ---
Anyway, the comment in the header is clear enough: REQIDs over 0x3fff are
reserved for the kernel.  Linux uses this range for the kernel as well (see
net/key/af_key.c#L1915, gen_reqid()). They simply ignore bogus user requests
for higher numbers:

https://github.com/torvalds/linux/blob/master/net/key/af_key.c#L1959

                if (t->reqid > IPSEC_MANUAL_REQID_MAX)
                        t->reqid = 0;

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-net mailing list