git: ae93abe7e9a0 - stable/15 - tcp md5: improve consistency

From: Michael Tuexen <tuexen_at_FreeBSD.org>
Date: Fri, 23 Oct 2026 17:39:16 UTC
The branch stable/15 has been updated by tuexen:

URL: https://cgit.FreeBSD.org/src/commit/?id=ae93abe7e9a0853717cb0d18e33e2bf93d41d2d3

commit ae93abe7e9a0853717cb0d18e33e2bf93d41d2d3
Author:     Michael Tuexen <tuexen@FreeBSD.org>
AuthorDate: 2026-09-04 07:37:45 +0000
Commit:     Michael Tuexen <tuexen@FreeBSD.org>
CommitDate: 2026-10-23 17:38:09 +0000

    tcp md5: improve consistency
    
    All other usages of SCF_SIGNATURE are protected by IPSEC_SUPPORT
    or TCP_SIGNATURE.
    No functional change intended.
    
    Reported by:    Hannes Elfert
    
    (cherry picked from commit 74d330943b572a6f17f45b7c9c2035bde2956380)
---
 sys/netinet/tcp_syncache.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/sys/netinet/tcp_syncache.c b/sys/netinet/tcp_syncache.c
index 9209970eee5a..a4dd8d9fc4e6 100644
--- a/sys/netinet/tcp_syncache.c
+++ b/sys/netinet/tcp_syncache.c
@@ -2351,8 +2351,10 @@ syncookie_expand(struct in_conninfo *inc, const struct syncache_head *sch,
 		sc->sc_tsoff = tcp_new_ts_offset(inc);
 	}
 
+#if defined(IPSEC_SUPPORT) || defined(TCP_SIGNATURE)
 	if (to->to_flags & TOF_SIGNATURE)
 		sc->sc_flags |= SCF_SIGNATURE;
+#endif
 
 	sc->sc_rxmits = 0;