[IPSEC]: Missing reqid check in xfrm_state_ok.

d4cef02e · Herbert Xu · David S. Miller · 1b4e3e1d · d4cef02e
Commit d4cef02e authored Jul 12, 2003 by Herbert Xu Committed by David S. Miller Jul 12, 2003
Show whitespace changes
Inline Side-by-side

Showing with 1 addition and 0 deletions

net/xfrm/xfrm_policy.c net/xfrm/xfrm_policy.c +1 -0

No files found.
--- a/net/xfrm/xfrm_policy.c
+++ b/net/xfrm/xfrm_policy.c
@@ -855,6 +855,7 @@ xfrm_state_ok(struct xfrm_tmpl *tmpl, struct xfrm_state *x,
 {
 	return	x->id.proto == tmpl->id.proto &&
 		(x->id.spi == tmpl->id.spi || !tmpl->id.spi) &&
+		(x->props.reqid == tmpl->reqid || !tmpl->reqid) &&
 		x->props.mode == tmpl->mode &&
 		(tmpl->aalgos & (1<<x->props.aalgo)) &&
 		!(x->props.mode && xfrm_state_addr_cmp(tmpl, x, family));