HEAD ip_fw2 ipsec b0rked

[Hajimu UMEMOTO]

Hi,

>>>>> On Fri, 7 Nov 2003 13:44:45 +0200
>>>>> "Ari Suutari" <ari at suutari.iki.fi> said:

> 1) when someone fixes the
> panic: ipsec_gethist: obsolete API
>    in netinet/ip_fw2.c

ari>     I think that ipsec_gethist is being called from ip_input
ari>     also, so if it is going to be obsolete the new way can
ari>     be found there. Or do you mean that only
ari>     then second parameter is now obsolete ?

Yes, ipsec_gethist() was obsoleted and replaced by ipsec_getnhist()
during KAME merge.  Calling ipsec_gethist() in ip_input.c which you
mentioned was already replaced by ipsec_getnhist().  However, I didn't
noticed that ipsec_gethist() is called in ip_fw2.c.

ari>     (Apparently someone is merging things from kame
ari>     tree ?)

Yes, I did.

--
Hajimu UMEMOTO @ Internet Mutual Aid Society Yokohama, Japan
ume at mahoroba.org  ume at bisd.hitachi.co.jp  ume@{,jp.}FreeBSD.org
http://www.imasy.org/~ume/