Subject: Re: Fw: [Bugme-new] [Bug 4138] New: ipsec with racoon in transport mode with esp and ah hangs (problem is in xfrm_state_add)

From: "David S. Miller" <[email-masked]>
Date: Mon, 31 Jan 2005 11:40:04 -0800

On Mon, 31 Jan 2005 21:54:33 +1100
Herbert Xu <[email-masked]> wrote:

> Well without the check we would have silently ignored the sequence
> number which is why you wouldn't have noticed the problem with racoon
> before.
> 
> However, for those who need to use the sequence number this check is
> necessary.

Yes, but the loop in the kernel must be prevented nevertheless,
buggy userland or not.