summaryrefslogtreecommitdiff
path: root/sbin/ipsecctl
diff options
context:
space:
mode:
authorHans-Joerg Hoexer <hshoexer@cvs.openbsd.org>2006-11-10 14:42:20 +0000
committerHans-Joerg Hoexer <hshoexer@cvs.openbsd.org>2006-11-10 14:42:20 +0000
commit1e1c31b7529afec23978574b96c765cff48decdc (patch)
tree668934711900158a1cc92619df8c52441d2fb7c8 /sbin/ipsecctl
parent28c37e48128cabe06c61052b0c8846359de98b31 (diff)
Do not count sa, ike and tcpmd5 rules twice. Fixes PR 5263.
Diffstat (limited to 'sbin/ipsecctl')
-rw-r--r--sbin/ipsecctl/parse.y5
1 files changed, 1 insertions, 4 deletions
diff --git a/sbin/ipsecctl/parse.y b/sbin/ipsecctl/parse.y
index 6decbd72b09..3bad4890e90 100644
--- a/sbin/ipsecctl/parse.y
+++ b/sbin/ipsecctl/parse.y
@@ -1,4 +1,4 @@
-/* $OpenBSD: parse.y,v 1.110 2006/11/01 03:10:02 mcbride Exp $ */
+/* $OpenBSD: parse.y,v 1.111 2006/11/10 14:42:19 hshoexer Exp $ */
/*
* Copyright (c) 2002, 2003, 2004 Henning Brauer <henning@openbsd.org>
@@ -295,7 +295,6 @@ tcpmd5rule : TCPMD5 hosts spispec authkeyspec {
$3.spiout, NULL, $4.keyout, NULL);
if (r == NULL)
YYERROR;
- r->nr = ipsec->rule_nr++;
if (expand_rule(r, 0, $3.spiin, $4.keyin, NULL, 0))
errx(1, "tcpmd5rule: expand_rule");
@@ -310,7 +309,6 @@ sarule : satype tmode hosts spispec transforms authkeyspec
$7.keyout);
if (r == NULL)
YYERROR;
- r->nr = ipsec->rule_nr++;
if (expand_rule(r, 0, $4.spiin, $6.keyin, $7.keyin, 1))
errx(1, "sarule: expand_rule");
@@ -338,7 +336,6 @@ ikerule : IKE ikemode satype tmode proto hosts peers
$10.srcid, $10.dstid, &$11);
if (r == NULL)
YYERROR;
- r->nr = ipsec->rule_nr++;
if (expand_rule(r, 0, 0, NULL, NULL, 0))
errx(1, "ikerule: expand_rule");