sharpetronics/strongswan
1
0
Fork 0
mirror of https://github.com/strongswan/strongswan.git synced 2025-10-05 00:00:45 -04:00
Code Issues Projects Releases Wiki Activity

Don't reject OPAQUE ports while verifying traffic selector substructure

Browse Source
This commit is contained in:
Martin Willi 2013-02-21 11:45:24 +01:00
parent 0abeac3a0b
commit b443fa6123
1 changed files with 5 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/libcharon/encoding/payloads/traffic_selector_substructure.c
View File

@ -114,7 +114,11 @@ METHOD(payload_t, verify, status_t,
{
if (this->start_port > this->end_port)
{
return FAILED;
/* OPAQUE ports are the only exception */
if (this->start_port != 0xffff && this->end_port != 0)
{
return FAILED;
}
}
switch (this->ts_type)
{