X-Git-Url: https://tinc-vpn.org/git/browse?p=tinc;a=blobdiff_plain;f=src%2Fnet_packet.c;h=bb50aa2d982e8cc216d05bae75473eb813b82c42;hp=1ae72e16b9890f0b8d34ea786441cb2c11eb9836;hb=ca7948fc06fd0495dc8104d7f55948f702ac09e2;hpb=7926a156e5b118d06295228e57de0cc9de0433b4

diff --git a/src/net_packet.c b/src/net_packet.c
index 1ae72e16..bb50aa2d 100644
--- a/src/net_packet.c
+++ b/src/net_packet.c
@@ -231,17 +231,21 @@ static void receive_udppacket(node_t *n, vpn_packet_t *inpkt)
 			
 			memset(n->late, 0, sizeof(n->late));
 		} else if (inpkt->seqno <= n->received_seqno) {
-			if(inpkt->seqno <= n->received_seqno - sizeof(n->late) * 8 || !(n->late[(inpkt->seqno / 8) % sizeof(n->late)] & (1 << inpkt->seqno % 8))) {
+			if((n->received_seqno >= sizeof(n->late) * 8 && inpkt->seqno <= n->received_seqno - sizeof(n->late) * 8) || !(n->late[(inpkt->seqno / 8) % sizeof(n->late)] & (1 << inpkt->seqno % 8))) {
 				logger(LOG_WARNING, _("Got late or replayed packet from %s (%s), seqno %d, last received %d"),
 					   n->name, n->hostname, inpkt->seqno, n->received_seqno);
-			} else
-				for(i = n->received_seqno + 1; i < inpkt->seqno; i++)
-					n->late[(inpkt->seqno / 8) % sizeof(n->late)] |= 1 << i % 8;
+				return;
+			}
+		} else {
+			for(i = n->received_seqno + 1; i < inpkt->seqno; i++)
+				n->late[(i / 8) % sizeof(n->late)] |= 1 << i % 8;
 		}
 	}
 	
-	n->received_seqno = inpkt->seqno;
-	n->late[(n->received_seqno / 8) % sizeof(n->late)] &= ~(1 << n->received_seqno % 8);
+	n->late[(inpkt->seqno / 8) % sizeof(n->late)] &= ~(1 << inpkt->seqno % 8);
+
+	if(inpkt->seqno > n->received_seqno)
+		n->received_seqno = inpkt->seqno;
 			
 	if(n->received_seqno > MAX_SEQNO)
 		keyexpires = 0;