]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Apply the change from r272770 to if_ipsec(4) interface.
authorae <ae@FreeBSD.org>
Fri, 11 May 2018 16:50:25 +0000 (16:50 +0000)
committerae <ae@FreeBSD.org>
Fri, 11 May 2018 16:50:25 +0000 (16:50 +0000)
commitc53ab47acf63d9290dfb26c79371bbfc373ee865
tree49fa95138d5bf09a6a2012ed2f04ab9a3114f744
parent1e55e4ac643026c18fe41a4b90fb0484e0cb92a0
Apply the change from r272770 to if_ipsec(4) interface.

It is guaranteed that if_ipsec(4) interface is used only for tunnel
mode IPsec, i.e. decrypted and decapsultaed packet has its own IP header.
Thus we can consider it as new packet and clear the protocols flags.
This allows ICMP/ICMPv6 properly handle errors that may cause this packet.

PR: 228108
MFC after: 1 week
sys/net/if_ipsec.c