File 0001-CVE-2026-25075-strongswan-Integer-Underflow-When-Han.patch of Package strongswan.43121

From 0330597a407b3f913ea474ad4e9dc9ef2b0067a9 Mon Sep 17 00:00:00 2001
From: Rahul Jain <rahul.jain@suse.com>
Date: Wed, 11 Mar 2026 22:32:39 +0530
Subject: [PATCH] CVE-2026-25075:strongswan:Integer Underflow When Handling
 EAP-TTLS AVP

---
 src/libcharon/sa/ikev2/authenticators/pubkey_authenticator.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/libcharon/sa/ikev2/authenticators/pubkey_authenticator.c b/src/libcharon/sa/ikev2/authenticators/pubkey_authenticator.c
index 4f83dad..ce470cf 100644
--- a/src/libcharon/sa/ikev2/authenticators/pubkey_authenticator.c
+++ b/src/libcharon/sa/ikev2/authenticators/pubkey_authenticator.c
@@ -624,7 +624,7 @@ METHOD(authenticator_t, process, status_t,
 			DBG1(DBG_IKE, "%N authentication %s", auth_method_names,
 				 auth_method, reason);
 			signature_params_destroy(params);
-			return INVALID_ARG;
+			return FAILED;
 	}
 	id = this->ike_sa->get_other_id(this->ike_sa);
 	if (!get_auth_octets_scheme(this, TRUE, id, this->ppk, &octets, &params))
-- 
2.50.0

openSUSE Build Service is sponsored by