svn commit: r282139 - head/sys/netipsec

[Andrey V. Elsukov]

Author: ae
Date: Tue Apr 28 11:03:47 2015
New Revision: 282139
URL: https://svnweb.freebsd.org/changeset/base/282139

Log:
  Fix the comment. We will not do SPD lookup again, because
  ip[6]_ipsec_output() will find PACKET_TAG_IPSEC_OUT_DONE mbuf tag.
  
  Sponsored by:	Yandex LLC

Modified:
  head/sys/netipsec/ipsec_output.c

Modified: head/sys/netipsec/ipsec_output.c
==============================================================================
--- head/sys/netipsec/ipsec_output.c	Tue Apr 28 10:59:06 2015	(r282138)
+++ head/sys/netipsec/ipsec_output.c	Tue Apr 28 11:03:47 2015	(r282139)
@@ -206,8 +206,7 @@ ipsec_process_done(struct mbuf *m, struc
 
 	/*
 	 * We're done with IPsec processing, transmit the packet using the
-	 * appropriate network protocol (IP or IPv6). SPD lookup will be
-	 * performed again there.
+	 * appropriate network protocol (IP or IPv6).
 	 */
 	switch (saidx->dst.sa.sa_family) {
 #ifdef INET