Fix broken window replay check that will allow old packet to be accep…

…ted. This was introduced in r309144. Submitted by: Jean-Francois HREN <jean-francois.hren@stormshield.eu> Approved by: ae@ MFC after: 3 days
freebsd · Sep 6, 2019 · c4d20bf · c4d20bf
1 parent 0bfa32c
commit c4d20bf
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/sys/netipsec/ipsec.c b/sys/netipsec/ipsec.c
@@ -1323,6 +1323,8 @@ ipsec_updatereplay(uint32_t seq, struct secasvar *sav)
 		    __func__, replay->overflow,
 		    ipsec_sa2str(sav, buf, sizeof(buf))));
 	}
+
+	replay->count++;
 	return (0);
 }