cvs commit: src/sys/netinet ip_ipsec.c src/sys/netinet6 ip6_output.c src/sys/netipsec ipsec_output.c

[Bjoern A. Zeeb]

bz          2008-03-14 16:38:11 UTC

  FreeBSD src repository

  Modified files:
    sys/netinet          ip_ipsec.c 
    sys/netinet6         ip6_output.c 
    sys/netipsec         ipsec_output.c 
  Log:
  Correct IPsec behaviour with a 'use' level in SP but no SA available.
  In that case return an continue processing the packet without IPsec.
  
  PR:             121384
  MFC after:      5 days
  Reported by:    Cyrus Rahman (crahman gmail.com)
  Tested by:      Cyrus Rahman (crahman gmail.com) [slightly older version]
  
  Revision  Changes    Path
  1.9       +12 -0     src/sys/netinet/ip_ipsec.c
  1.117     +16 -2     src/sys/netinet6/ip6_output.c
  1.18      +33 -22    src/sys/netipsec/ipsec_output.c