svn commit: r283146 - head/sys/netipsec

[Andrey V. Elsukov]

Author: ae
Date: Wed May 20 11:59:53 2015
New Revision: 283146
URL: https://svnweb.freebsd.org/changeset/base/283146

Log:
  In the reply to SADB_X_SPDGET message use the same sequence number that
  was in the request. Some IKE deamons expect it will the same. Linux and
  NetBSD also follow this behaviour.
  
  PR:		137309
  MFC after:	2 weeks

Modified:
  head/sys/netipsec/key.c

Modified: head/sys/netipsec/key.c
==============================================================================
--- head/sys/netipsec/key.c	Wed May 20 11:16:17 2015	(r283145)
+++ head/sys/netipsec/key.c	Wed May 20 11:59:53 2015	(r283146)
@@ -2199,7 +2199,7 @@ key_spddelete2(struct socket *so, struct
 }
 
 /*
- * SADB_X_GET processing
+ * SADB_X_SPDGET processing
  * receive
  *   <base, policy(*)>
  * from the user(?),
@@ -2237,7 +2237,8 @@ key_spdget(struct socket *so, struct mbu
 		return key_senderror(so, m, ENOENT);
 	}
 
-	n = key_setdumpsp(sp, SADB_X_SPDGET, 0, mhp->msg->sadb_msg_pid);
+	n = key_setdumpsp(sp, SADB_X_SPDGET, mhp->msg->sadb_msg_seq,
+	    mhp->msg->sadb_msg_pid);
 	KEY_FREESP(&sp);
 	if (n != NULL) {
 		m_freem(m);