Google Git
Sign in
android / platform / packages / modules / IPsec / refs/heads/android-s-beta-4
commit0db87be916a25e3a9ae72f57986627c5cb9fbfdc[log] [tgz]
authorYan Yan <evitayan@google.com>Thu Jul 08 13:37:08 2021 -0700
committerYan Yan <evitayan@google.com>Fri Jul 09 14:12:01 2021 -0700
tree3b872b7bb988aa631f59e74e0536f1240b5db28e
parentfdffe8789d5c8b553d42cb841eaacf3420ba5f0d [diff]
Fix Rekey Child to include caller configured DH groups

This commit fixes ChildSessionParams getters to return new
instances to avoid the risk of changing internal states of
ChildSessionParams. It fixes Rekey Child so that the
outbound request will include caller configured DH groups.

Previously getSaProposalsInternal returns the array instance
stored in ChildSessionParams, and causes the internal array
instance modified unexpectedly in the IKE AUTH state.
As results, ChildSessionParams#getSaProposalsInternal no
longer includes any caller configured DH groups and causes
the Rekey Child request to be rejected. This commit fixes
this issue by returning a copy of the array in
getSaProposalsInternal

Bug: 92042613
Test: atest FrameworksIkeTests(new tests), CtsIkeTestCases
Test: Manually verified Rekey Child
Change-Id: I49477a90465c3191811b139794676a577cd6cb41
Merged-In: I49477a90465c3191811b139794676a577cd6cb41
(cherry picked from commit b8a38090724ab1f2ee33de2f2c7f91327eff1331)
2 files changed
tree: 3b872b7bb988aa631f59e74e0536f1240b5db28e
  1. apex/
  2. api/
  3. src/
  4. tests/
  5. Android.bp
  6. jarjar-rules-shared.txt
  7. jarjar-rules-test.txt
  8. lint-baseline.xml
  9. OWNERS
  10. PREUPLOAD.cfg
  11. README.md
  12. TEST_MAPPING
README.md

IKEv2 Library for Android

Introduction

This IKEv2 library is an in-process client library implementing the IKEv2 protocol as well as extensions necessary for the support of IWLAN. It is designed to work in a non-privileged fashion on top of the Android IPsec API surface.