svn commit: r316353 - stable/11/sys/netipsec

[Andrey V. Elsukov]

Author: ae
Date: Sat Apr  1 10:02:36 2017
New Revision: 316353
URL: https://svnweb.freebsd.org/changeset/base/316353

Log:
  MFC r316133:
    Fix bug in r308972 that leads to panic when non-compressed IPComp
    packet is received.
  
    Reported by:	Denis Ahrens <denis h3q com>

Modified:
  stable/11/sys/netipsec/key.c
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/sys/netipsec/key.c
==============================================================================
--- stable/11/sys/netipsec/key.c	Sat Apr  1 09:37:15 2017	(r316352)
+++ stable/11/sys/netipsec/key.c	Sat Apr  1 10:02:36 2017	(r316353)
@@ -1041,9 +1041,9 @@ key_allocsa_tunnel(union sockaddr_union 
 			continue;
 		if (proto != sah->saidx.proto)
 			continue;
-		if (key_sockaddrcmp(&src->sa, &sav->sah->saidx.src.sa, 0) != 0)
+		if (key_sockaddrcmp(&src->sa, &sah->saidx.src.sa, 0) != 0)
 			continue;
-		if (key_sockaddrcmp(&dst->sa, &sav->sah->saidx.dst.sa, 0) != 0)
+		if (key_sockaddrcmp(&dst->sa, &sah->saidx.dst.sa, 0) != 0)
 			continue;
 		/* XXXAE: is key_preferred_oldsa reasonably?*/
 		if (V_key_preferred_oldsa)