svn commit: r316133 - head/sys/netipsec

[Andrey V. Elsukov]

Author: ae
Date: Wed Mar 29 10:24:48 2017
New Revision: 316133
URL: https://svnweb.freebsd.org/changeset/base/316133

Log:
  Fix bug in r308972 that leads to panic when non-compressed IPComp
  packet is received.
  
  Reported by:	Denis Ahrens <denis h3q com>
  MFC after:	3 days

Modified:
  head/sys/netipsec/key.c

Modified: head/sys/netipsec/key.c
==============================================================================
--- head/sys/netipsec/key.c	Wed Mar 29 09:30:03 2017	(r316132)
+++ head/sys/netipsec/key.c	Wed Mar 29 10:24:48 2017	(r316133)
@@ -1041,9 +1041,9 @@ key_allocsa_tunnel(union sockaddr_union 
 			continue;
 		if (proto != sah->saidx.proto)
 			continue;
-		if (key_sockaddrcmp(&src->sa, &sav->sah->saidx.src.sa, 0) != 0)
+		if (key_sockaddrcmp(&src->sa, &sah->saidx.src.sa, 0) != 0)
 			continue;
-		if (key_sockaddrcmp(&dst->sa, &sav->sah->saidx.dst.sa, 0) != 0)
+		if (key_sockaddrcmp(&dst->sa, &sah->saidx.dst.sa, 0) != 0)
 			continue;
 		/* XXXAE: is key_preferred_oldsa reasonably?*/
 		if (V_key_preferred_oldsa)