Module Name: src
Committed By: maxv
Date: Tue May 1 08:16:34 UTC 2018
Modified Files:
src/sys/netipsec: xform_ah.c xform_esp.c
Log Message:
When the replay check fails, return EACCES instead of ENOBUFS.
To generate a diff of this commit:
cvs rdiff -u -r1.95 -r1.96 src/sys/netipsec/xform_ah.c
cvs rdiff -u -r1.83 -r1.84 src/sys/netipsec/xform_esp.c
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
Modified files:
Index: src/sys/netipsec/xform_ah.c
diff -u src/sys/netipsec/xform_ah.c:1.95 src/sys/netipsec/xform_ah.c:1.96
--- src/sys/netipsec/xform_ah.c:1.95 Sat Apr 28 15:45:16 2018
+++ src/sys/netipsec/xform_ah.c Tue May 1 08:16:34 2018
@@ -1,4 +1,4 @@
-/* $NetBSD: xform_ah.c,v 1.95 2018/04/28 15:45:16 maxv Exp $ */
+/* $NetBSD: xform_ah.c,v 1.96 2018/05/01 08:16:34 maxv Exp $ */
/* $FreeBSD: xform_ah.c,v 1.1.4.1 2003/01/24 05:11:36 sam Exp $ */
/* $OpenBSD: ip_ah.c,v 1.63 2001/06/26 06:18:58 angelos Exp $ */
/*
@@ -39,7 +39,7 @@
*/
#include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: xform_ah.c,v 1.95 2018/04/28 15:45:16 maxv Exp $");
+__KERNEL_RCSID(0, "$NetBSD: xform_ah.c,v 1.96 2018/05/01 08:16:34 maxv Exp $");
#if defined(_KERNEL_OPT)
#include "opt_inet.h"
@@ -546,7 +546,7 @@ ah_input(struct mbuf *m, struct secasvar
DPRINTF(("%s: packet replay failure: %s\n", __func__,
ipsec_logsastr(sav, buf, sizeof(buf))));
stat = AH_STAT_REPLAY;
- error = ENOBUFS;
+ error = EACCES;
goto bad;
}
Index: src/sys/netipsec/xform_esp.c
diff -u src/sys/netipsec/xform_esp.c:1.83 src/sys/netipsec/xform_esp.c:1.84
--- src/sys/netipsec/xform_esp.c:1.83 Tue May 1 08:13:37 2018
+++ src/sys/netipsec/xform_esp.c Tue May 1 08:16:34 2018
@@ -1,4 +1,4 @@
-/* $NetBSD: xform_esp.c,v 1.83 2018/05/01 08:13:37 maxv Exp $ */
+/* $NetBSD: xform_esp.c,v 1.84 2018/05/01 08:16:34 maxv Exp $ */
/* $FreeBSD: xform_esp.c,v 1.2.2.1 2003/01/24 05:11:36 sam Exp $ */
/* $OpenBSD: ip_esp.c,v 1.69 2001/06/26 06:18:59 angelos Exp $ */
@@ -39,7 +39,7 @@
*/
#include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: xform_esp.c,v 1.83 2018/05/01 08:13:37 maxv Exp $");
+__KERNEL_RCSID(0, "$NetBSD: xform_esp.c,v 1.84 2018/05/01 08:16:34 maxv Exp $");
#if defined(_KERNEL_OPT)
#include "opt_inet.h"
@@ -354,7 +354,7 @@ esp_input(struct mbuf *m, struct secasva
DPRINTF(("%s: packet replay check for %s\n", __func__,
ipsec_logsastr(sav, logbuf, sizeof(logbuf))));
stat = ESP_STAT_REPLAY;
- error = ENOBUFS; /* XXX */
+ error = EACCES;
goto out;
}
