summaryrefslogtreecommitdiff
path: root/sys/net/pfkeyv2_parsemessage.c
diff options
context:
space:
mode:
Diffstat (limited to 'sys/net/pfkeyv2_parsemessage.c')
-rw-r--r--sys/net/pfkeyv2_parsemessage.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/sys/net/pfkeyv2_parsemessage.c b/sys/net/pfkeyv2_parsemessage.c
index 8df43d6a17d..7c56c9823f5 100644
--- a/sys/net/pfkeyv2_parsemessage.c
+++ b/sys/net/pfkeyv2_parsemessage.c
@@ -285,6 +285,9 @@ pfkeyv2_parsemessage(void *p, int len, void **headers)
if (sadb_sa->sadb_sa_auth > SADB_AALG_MAX)
return EINVAL;
+
+ if (sadb_sa->sadb_sa_replay > 32)
+ return EINVAL;
}
break;
case SADB_EXT_X_PROTOCOL: