[Swan-commit] Changes to ref refs/heads/master
Andrew Cagney
cagney at vault.libreswan.fi
Wed Nov 7 14:01:33 UTC 2018
New commits:
commit 4948da023aefe079824f96fc48fc526b326fd27c
Author: Andrew Cagney <cagney at gnu.org>
Date: Wed Nov 7 08:09:28 2018 -0500
IKEv2 TS: change match_address_range() to to compare <=/>= depending on initiator / responder
For the responder this flips END_WIDER_THAN_TS to END_NARROWER_THAN_TS
when comparing addresses. No new failures which would suggest
this case isn't covered?
It is eventually going to need to compute the intersection so that
it can match the first TS pair better.
(the more useful thing is the addition of ip_subnet_floor() and
ip_subnet_ceiling() for doing the comparisons against an ip_range).
More information about the Swan-commit
mailing list