svn commit: r283937 - stable/10/sys/netipsec

[Andrey V. Elsukov]

Author: ae
Date: Wed Jun  3 02:50:58 2015
New Revision: 283937
URL: https://svnweb.freebsd.org/changeset/base/283937

Log:
  MFC r283146:
    In the reply to SADB_X_SPDGET message use the same sequence number that
    was in the request. Some IKE deamons expect it will the same. Linux and
    NetBSD also follow this behaviour.
  
    PR:		137309

Modified:
  stable/10/sys/netipsec/key.c
Directory Properties:
  stable/10/   (props changed)

Modified: stable/10/sys/netipsec/key.c
==============================================================================
--- stable/10/sys/netipsec/key.c	Tue Jun  2 23:11:12 2015	(r283936)
+++ stable/10/sys/netipsec/key.c	Wed Jun  3 02:50:58 2015	(r283937)
@@ -2226,7 +2226,7 @@ key_spddelete2(struct socket *so, struct
 }
 
 /*
- * SADB_X_GET processing
+ * SADB_X_SPDGET processing
  * receive
  *   <base, policy(*)>
  * from the user(?),
@@ -2264,7 +2264,8 @@ key_spdget(struct socket *so, struct mbu
 		return key_senderror(so, m, ENOENT);
 	}
 
-	n = key_setdumpsp(sp, SADB_X_SPDGET, 0, mhp->msg->sadb_msg_pid);
+	n = key_setdumpsp(sp, SADB_X_SPDGET, mhp->msg->sadb_msg_seq,
+	    mhp->msg->sadb_msg_pid);
 	KEY_FREESP(&sp);
 	if (n != NULL) {
 		m_freem(m);