From: Masahide NAKAMURA <[EMAIL PROTECTED]>
Date: Sat, 29 Jul 2006 18:30:38 +0900

> -             (tmpl->aalgos & (1<<x->props.aalgo)) &&
> +             ((tmpl->aalgos & (1<<x->props.aalgo)) ||
> +              !(xfrm_id_proto_match(tmpl->id.proto, IPSEC_PROTO_ANY))) &&

This is another instance of a xfrm_id_proto_match() call
which will always evaluate to true, because the userproto
argument is IPSEC_PROTO_ANY.

+static inline int xfrm_id_proto_match(u8 proto, u8 userproto)
+{
+       return (userproto == IPSEC_PROTO_ANY || proto == userproto);
+}

Can you elaborate on how this is supposed to work?  It does not
seem intentional that all of these calls will always evaluate
to true.

-
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to [EMAIL PROTECTED]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to