From: angelos <angelos@openbsd.org>
Date: Sat, 22 Feb 1997 11:34:46 +0000 (+0000)
Subject: Fixed problem with authenticator length checking.
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=54695bd75f593fac191fce5418e006d132cd18c2;p=openbsd

Fixed problem with authenticator length checking.
---

diff --git a/sys/netinet/ip_ahhmacmd5.c b/sys/netinet/ip_ahhmacmd5.c
index c4ddea126a9..1ee56be908f 100644
--- a/sys/netinet/ip_ahhmacmd5.c
+++ b/sys/netinet/ip_ahhmacmd5.c
@@ -189,7 +189,7 @@ ahhmacmd5_input(struct mbuf *m, struct tdb *tdb)
         else
           ado = 0;
 
-        if (ah->ah_hl != xd->amx_alen + ado)
+        if (ah->ah_hl * sizeof(u_int32_t) != xd->amx_alen + ado)
         {
 #ifdef ENCDEBUG
                 if (encdebug)
diff --git a/sys/netinet/ip_ahhmacsha1.c b/sys/netinet/ip_ahhmacsha1.c
index 6e66955fe06..9a9d4e33f9c 100644
--- a/sys/netinet/ip_ahhmacsha1.c
+++ b/sys/netinet/ip_ahhmacsha1.c
@@ -189,7 +189,7 @@ ahhmacsha1_input(struct mbuf *m, struct tdb *tdb)
         else
           ado = 0;
 
-        if (ah->ah_hl != xd->amx_alen + ado)
+        if (ah->ah_hl * sizeof(u_int32_t) != xd->amx_alen + ado)
         {
 #ifdef ENCDEBUG
                 if (encdebug)