NetBSD Problem Report #56863
From www@netbsd.org Sun Jun 5 15:13:25 2022
Return-Path: <www@netbsd.org>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
(Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified))
by mollari.NetBSD.org (Postfix) with ESMTPS id A898D1A921F
for <gnats-bugs@gnats.NetBSD.org>; Sun, 5 Jun 2022 15:13:25 +0000 (UTC)
Message-Id: <20220605151324.630201A923A@mollari.NetBSD.org>
Date: Sun, 5 Jun 2022 15:13:24 +0000 (UTC)
From: andrew.cagney@gmail.com
Reply-To: andrew.cagney@gmail.com
To: gnats-bugs@NetBSD.org
Subject: please support IPsec extended replay window
X-Send-Pr-Version: www-1.0
>Number: 56863
>Category: kern
>Synopsis: please support IPsec extended replay window
>Confidential: no
>Severity: serious
>Priority: medium
>Responsible: kern-bug-people
>State: open
>Class: change-request
>Submitter-Id: net
>Arrival-Date: Sun Jun 05 15:15:00 +0000 2022
>Originator: Andrew Cagney
>Release: trunk
>Organization:
>Environment:
trunk
>Description:
The pfkey v2 structure sadb_sa has the 8-bit field:
sys/net/pfkeyv2.h: uint8_t sadb_sa_replay;
for specifying the size of the window.
Can the code please be enhanced to also support FreeBSD's 32-bit replay structure:
#define SADB_X_EXT_SA_REPLAY 26 /* Replay window override. */
/* Additional large replay window support
*/
struct sadb_x_sa_replay {
u_int16_t sadb_x_sa_replay_len;
u_int16_t sadb_x_sa_replay_exttype;
u_int32_t sadb_x_sa_replay_replay; /* in packets */
};
_Static_assert(sizeof(struct sadb_x_sa_replay) == 8, "struct size mismatch");
>How-To-Repeat:
>Fix:
(Contact us)
$NetBSD: query-full-pr,v 1.46 2020/01/03 16:35:01 leot Exp $
$NetBSD: gnats_config.sh,v 1.9 2014/08/02 14:16:04 spz Exp $
Copyright © 1994-2020
The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.