CVSROOT: /cvs
Module name: src
Changes by: patr...@cvs.openbsd.org 2017/03/13 08:19:08
Modified files:
sbin/iked : policy.c
Log message:
We need to call policy_ref() for policies that have refcounting
enabled. Refcounting is enabled when a policy is removed during
'ikectl reload' and still has SAs point to it. On IKESA rekeying
such a policy will be referenced by the new IKESA, so we need to
adjust the refcount -- otherwise the policies get free()d too
early and we will crash at some point.
ok markus@ mikeb@ reyk@
