PERFORCE change 91569 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=91569

Change 91569 by rwatson at rwatson_zoo on 2006/02/11 13:43:42

	Re-merge CIPSO option parsing.  Note that what we have may not be
	everything we need.

Affected files ...

.. //depot/projects/trustedbsd/mac/sys/netinet/ip_options.c#2 edit

Differences ...

==== //depot/projects/trustedbsd/mac/sys/netinet/ip_options.c#2 (text+ko) ====

@@ -354,8 +354,11 @@
 
 		case IPOPT_CIPSO:
 #ifdef MAC
-			error = mac_update_mbuf_from_cipso(m, cp, &code);
-			if (error)
+			/*
+			 * Should we be providing the option to free the mbuf
+			 * and not return ICMP?
+			 */
+			if (mac_update_mbuf_from_cipso(m, cp, &code) != 0)
 				goto bad;
 #endif
 			break;