From owner-cvs-src@FreeBSD.ORG Fri Mar 21 23:22:07 2008 Return-Path: Delivered-To: cvs-src@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id A2377106564A; Fri, 21 Mar 2008 23:22:07 +0000 (UTC) (envelope-from bz@FreeBSD.org) Received: from repoman.freebsd.org (repoman.freebsd.org [IPv6:2001:4f8:fff6::29]) by mx1.freebsd.org (Postfix) with ESMTP id 831378FC12; Fri, 21 Mar 2008 23:22:07 +0000 (UTC) (envelope-from bz@FreeBSD.org) Received: from repoman.freebsd.org (localhost [127.0.0.1]) by repoman.freebsd.org (8.14.1/8.14.1) with ESMTP id m2LNM7Hm041508; Fri, 21 Mar 2008 23:22:07 GMT (envelope-from bz@repoman.freebsd.org) Received: (from bz@localhost) by repoman.freebsd.org (8.14.1/8.14.1/Submit) id m2LNM7vk041507; Fri, 21 Mar 2008 23:22:07 GMT (envelope-from bz) Message-Id: <200803212322.m2LNM7vk041507@repoman.freebsd.org> From: "Bjoern A. Zeeb" Date: Fri, 21 Mar 2008 23:22:07 +0000 (UTC) To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org X-FreeBSD-CVS-Branch: RELENG_7 Cc: Subject: cvs commit: src/sys/netinet ip_ipsec.c src/sys/netinet6 ip6_output.c src/sys/netipsec ipsec_output.c X-BeenThere: cvs-src@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: CVS commit messages for the src tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Mar 2008 23:22:07 -0000 bz 2008-03-21 23:22:07 UTC FreeBSD src repository Modified files: (Branch: RELENG_7) sys/netinet ip_ipsec.c sys/netinet6 ip6_output.c sys/netipsec ipsec_output.c Log: MFC: rev. 1.9 ip_ipsec.c, 1.117 ip6_output.c, 1.18 ipsec_output.c Correct IPsec behaviour with a 'use' level in SP but no SA available. In that case return an continue processing the packet without IPsec. PR: 121384 Reported by: Cyrus Rahman (crahman gmail.com) Tested by: Cyrus Rahman (crahman gmail.com) [slightly older version] Revision Changes Path 1.8.2.1 +12 -0 src/sys/netinet/ip_ipsec.c 1.109.2.6 +16 -2 src/sys/netinet6/ip6_output.c 1.16.2.1 +33 -22 src/sys/netipsec/ipsec_output.c