nhrpd: change ipsec SA count to 32-bit

Under certain misconfigurations, the SA count can be unusually high
and wrap 8-bit counter. That leads to premature free, and crash.
Make the count 32-bit to avoid crash in these rare conditions.

Signed-off-by: Reuben Dowle <reuben.dowle@4rf.com>

diff --git a/nhrpd/nhrpd.h b/nhrpd/nhrpd.h
index 80a365a3c38d0064593ceafede9361510f6c7890..4ff9734ce632ae50222df8d106960c367075f7ee 100644 (file)
--- a/nhrpd/nhrpd.h
+++ b/nhrpd/nhrpd.h
@@ -124,7 +124,7 @@ enum nhrp_notify_type {
 
 struct nhrp_vc {
        struct notifier_list notifier_list;
-       uint8_t ipsec;
+       uint32_t ipsec;
        uint8_t updating;
        uint8_t abort_migration;