[Swan] fragment assembly code handling of non ESP marker

D. Hugh Redelmeier hugh at mimosa.com
Thu Feb 14 22:18:50 EET 2013


Can the first fragment contain a non ESP marker?

If not, we should delete the code to handle it.
In programs/pluto/ikev1.c:

        /* Strip non-ESP marker from first fragment */
        if (md->iface->ike_float && ike_frag->index == 1 && ike_frag->data[0] == 0)
        {
            ike_frag->data += 1;
            ike_frag->size -= 1;
        }

If it can happen, we should fix the code.  This code assumes that the 
marker is 1 octet long but it is 4 octets.



More information about the Swan mailing list