d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Looking at {ah,esp}_input_cb it seems we might be able to end up

Browse Source 
without an mtag in ipsec4_common_input_cb.
So in case of !IPCOMP (AH,ESP) only change the m_tag_id if an mtag
was passed to ipsec4_common_input_cb.

Found with:	Coverity Prevent(tm)
CID:		2523
This commit is contained in:
Bjoern A. Zeeb 2007-06-15 22:23:33 +00:00
parent 76507741ab
commit 0e41ce659b
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=170797
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sys/netipsec/ipsec_input.c
View File

@ -445,7 +445,7 @@ ipsec4_common_input_cb(struct mbuf *m, struct secasvar *sav,
tdbi->spi = sav->spi;
m_tag_prepend(m, mtag);
} else {
} else if (mt != NULL) {
mt->m_tag_id = PACKET_TAG_IPSEC_IN_DONE;
/* XXX do we need to mark m_flags??? */
}