From 509f1a0f405daf0e2bdaa5b366d21b77052149c3 Mon Sep 17 00:00:00 2001
From: Wenfeng Liu <266lwf@163.com>
Date: Wed, 24 Nov 2021 17:34:32 +0800
Subject: [PATCH] ipsec: fix a logic error in key_do_getnewspi

---
 sys/netipsec/key.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sys/netipsec/key.c b/sys/netipsec/key.c
index 4eb4c7c76464..9b3d10e28902 100644
--- a/sys/netipsec/key.c
+++ b/sys/netipsec/key.c
@@ -5055,7 +5055,7 @@ key_do_getnewspi(struct sadb_spirange *spirange, struct secasindex *saidx)
 	}
 
 	if (min == max) {
-		if (!key_checkspidup(htonl(min))) {
+		if (key_checkspidup(htonl(min))) {
 			ipseclog((LOG_DEBUG, "%s: SPI %u exists already.\n",
 			    __func__, min));
 			return 0;