]> git.proxmox.com Git - mirror_edk2.git/commit
NetworkPkg/IpSecDxe: Fix wrong IKE header "FLAG" update
authorJiaxin Wu <jiaxin.wu@intel.com>
Mon, 15 Aug 2016 03:49:56 +0000 (11:49 +0800)
committerJiaxin Wu <jiaxin.wu@intel.com>
Thu, 18 Aug 2016 08:53:28 +0000 (16:53 +0800)
commit7822a1d91d53e80525f571183a24d54488f5437f
treef1a871e7d2b35f8fd6c4c8511511990219b7973e
parent40b83d6114f55ed975d9d632f0cd9679781c64e0
NetworkPkg/IpSecDxe: Fix wrong IKE header "FLAG" update

*v2: update the commit log and refine the code comments.

There are three kinds of IKE Exchange process:
#1. Initial Exchange
#2. CREATE_CHILD_SA_Exchange
#3. Information Exchange

The IKE header "FLAG" update is incorrect in #2 and #3 exchange,
which may cause the continue session failure. This patch is used
to correct the updates of IKE header "FLAG" according the RFC4306
section 3.1.

Cc: Ye Ting <ting.ye@intel.com>
Cc: Fu Siyuan <siyuan.fu@intel.com>
Cc: Zhang Lubo <lubo.zhang@intel.com>
Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Jiaxin Wu <jiaxin.wu@intel.com>
Reviewed-by: Ye Ting <ting.ye@intel.com>
NetworkPkg/IpSecDxe/Ikev2/ChildSa.c
NetworkPkg/IpSecDxe/Ikev2/Exchange.c
NetworkPkg/IpSecDxe/Ikev2/Info.c
NetworkPkg/IpSecDxe/Ikev2/Payload.h