[strongSwan-dev] [PATCH] fix error-type range in ike_auth parsing of NOTIFY payloads

[Andreas Steffen]

Applied to master:

http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=3c354b6d11cc7914b61e5ac015cdb53ae03bf569

Thanks

Andreas

On 09/29/2010 04:00 PM, Marius Tomaschewski wrote:
>
> diff --git a/src/libcharon/sa/tasks/ike_auth.c b/src/libcharon/sa/tasks/ike_auth.c
> index 32a3118..b440ec8 100644
> --- a/src/libcharon/sa/tasks/ike_auth.c
> +++ b/src/libcharon/sa/tasks/ike_auth.c
> @@ -825,7 +825,7 @@ static status_t process_i(private_ike_auth_t *this, message_t *message)
>   					break;
>   				default:
>   				{
> -					if (type<  16383)
> +					if (type<= 16383)
>   					{
>   						DBG1(DBG_IKE, "received %N notify error",
>   							 notify_type_names, type);


======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==