svn commit: r238877 - head/sys/netinet6

[Bjoern A. Zeeb]

Author: bz
Date: Sun Jul 29 00:44:41 2012
New Revision: 238877
URL: http://svn.freebsd.org/changeset/base/238877

Log:
  Fix a comment that we do not have an SA yet but need to acquire one.
  
  MFC after:	3 days

Modified:
  head/sys/netinet6/ip6_ipsec.c

Modified: head/sys/netinet6/ip6_ipsec.c
==============================================================================
--- head/sys/netinet6/ip6_ipsec.c	Sat Jul 28 23:11:09 2012	(r238876)
+++ head/sys/netinet6/ip6_ipsec.c	Sun Jul 29 00:44:41 2012	(r238877)
@@ -263,7 +263,7 @@ ip6_ipsec_output(struct mbuf **m, struct
 			    mtag->m_tag_id != PACKET_TAG_IPSEC_OUT_CRYPTO_NEEDED)
 				continue;
 			/*
-			 * Check if policy has an SA associated with it.
+			 * Check if policy has no SA associated with it.
 			 * This can happen when an SP has yet to acquire
 			 * an SA; e.g. on first reference.  If it occurs,
 			 * then we let ipsec4_process_packet do its thing.