NetBSD Problem Report #56863

From www@netbsd.org  Sun Jun  5 15:13:25 2022
Return-Path: <www@netbsd.org>
Received: from mail.netbsd.org (mail.netbsd.org [199.233.217.200])
	(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
	(Client CN "mail.NetBSD.org", Issuer "mail.NetBSD.org CA" (not verified))
	by mollari.NetBSD.org (Postfix) with ESMTPS id A898D1A921F
	for <gnats-bugs@gnats.NetBSD.org>; Sun,  5 Jun 2022 15:13:25 +0000 (UTC)
Message-Id: <20220605151324.630201A923A@mollari.NetBSD.org>
Date: Sun,  5 Jun 2022 15:13:24 +0000 (UTC)
From: andrew.cagney@gmail.com
Reply-To: andrew.cagney@gmail.com
To: gnats-bugs@NetBSD.org
Subject: please support IPsec extended replay window
X-Send-Pr-Version: www-1.0

>Number:         56863
>Category:       kern
>Synopsis:       please support IPsec extended replay window
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Sun Jun 05 15:15:00 +0000 2022
>Originator:     Andrew Cagney
>Release:        trunk
>Organization:
>Environment:
trunk
>Description:
The pfkey v2 structure sadb_sa has the 8-bit field:
  sys/net/pfkeyv2.h:  uint8_t sadb_sa_replay;
for specifying the size of the window.

Can the code please be enhanced to also support FreeBSD's 32-bit replay structure:

#define SADB_X_EXT_SA_REPLAY          26        /* Replay window override. */
/* Additional large replay window support
 */
struct sadb_x_sa_replay {
  u_int16_t sadb_x_sa_replay_len;
  u_int16_t sadb_x_sa_replay_exttype;
  u_int32_t sadb_x_sa_replay_replay;    /* in packets */
};
_Static_assert(sizeof(struct sadb_x_sa_replay) == 8, "struct size mismatch");

>How-To-Repeat:

>Fix:

NetBSD Home
NetBSD PR Database Search

(Contact us) $NetBSD: query-full-pr,v 1.46 2020/01/03 16:35:01 leot Exp $
$NetBSD: gnats_config.sh,v 1.9 2014/08/02 14:16:04 spz Exp $
Copyright © 1994-2020 The NetBSD Foundation, Inc. ALL RIGHTS RESERVED.