aboutsummaryrefslogtreecommitdiff
path: root/sys/netipsec
diff options
context:
space:
mode:
authorAndrey V. Elsukov <ae@FreeBSD.org>2017-11-03 11:33:13 +0000
committerAndrey V. Elsukov <ae@FreeBSD.org>2017-11-03 11:33:13 +0000
commitcd48d883bd9c3b2dc3ef294215deab09e3824215 (patch)
treec7fa0084ce17a92c86bde6a70f38451bb0bf8dd1 /sys/netipsec
parent39bbca6ffd794bb72156fb8053ad0ea03ac98e19 (diff)
downloadsrc-cd48d883bd9c3b2dc3ef294215deab09e3824215.tar.gz
src-cd48d883bd9c3b2dc3ef294215deab09e3824215.zip
Use correct pointer in key_updateaddresses() when updating NAT-T config.
key_updateaddresses() is used to update SA addresses and NAT-T configuration in SADB_UPDATE message. This is done using cloning SA content from old SA into new one. But addresses and NAT-T configuration are taking from SADB_UPDATE message. Use newsa pointer to set NAT-T properties into cloned SA. PR: 223382 MFC after: 1 week
Notes
Notes: svn path=/head/; revision=325355
Diffstat (limited to 'sys/netipsec')
-rw-r--r--sys/netipsec/key.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/netipsec/key.c b/sys/netipsec/key.c
index 7a57a315c874..3c320cec116f 100644
--- a/sys/netipsec/key.c
+++ b/sys/netipsec/key.c
@@ -5100,7 +5100,7 @@ key_updateaddresses(struct socket *so, struct mbuf *m,
newsav->natt = NULL;
newsav->sah = sah;
newsav->state = SADB_SASTATE_MATURE;
- error = key_setnatt(sav, mhp);
+ error = key_setnatt(newsav, mhp);
if (error != 0)
goto fail;