[Swan-commit] Changes to ref refs/heads/master

[Andrew Cagney]

New commits:
commit 0e00374e130f1d74b8472dab56d481db69fdc177
Author: Andrew Cagney <cagney at gnu.org>
Date:   Thu Nov 22 10:43:38 2018 -0500

    IKEv2: exploit CHILD SA's sharing a hash slot when migrating to a rekeyed IKE SA
    
    Rather than search all states for an IKE SA's children, just search
    the IKE SA's hash slot - all children can be found there.
    
    Use FOR_EACH_LIST_ENTRY_NEW2OLD() so the search order is really clear.
    Use rehash_state_cookies_in_db(), no need for log_state() call.
    
    Document that it should probably scrub message counters (but that
    lacks evidence).