]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Correct IPSec SA statistic keeping
authorErmal Luçi <eri@FreeBSD.org>
Thu, 30 Jul 2015 20:56:27 +0000 (20:56 +0000)
committerErmal Luçi <eri@FreeBSD.org>
Thu, 30 Jul 2015 20:56:27 +0000 (20:56 +0000)
commit59959de526d5f0a9490e5e2c8a7dece961d8db7b
tree6e4b1a2a551af52be6adcc7822f602855d7951fc
parent4ae1e3c75294c5442c4e94430ec4ff8b7f3a930c
Correct IPSec SA statistic keeping

The IPsec SA statistic keeping is used even for decision making on expiry/rekeying SAs.
When there are multiple transformations being done the statistic keeping might be wrong.

This mostly impacts multiple encapsulations on IPsec since the usual scenario it is not noticed due to the code path not taken.

Differential Revision: https://reviews.freebsd.org/D3239
Reviewed by: ae, gnn
Approved by: gnn(mentor)
sys/netipsec/ipsec_output.c