Remove any stale mbuf tags from packets being injected into a netgraph

graph.  In particular, this solves some issues with (probably leaked)
IPSec-related tags being looped back through netgraph to the inbound
path which then misinterpreted the stale tags.

MFC after:	7 days
This commit is contained in:
Marko Zec 2014-07-01 07:54:12 +00:00
parent d9b6ab3a76
commit 58d8fd049f
Notes: svn2git 2020-12-20 02:59:44 +00:00
svn path=/head/; revision=268081

View File

@ -236,6 +236,9 @@ ng_eiface_start2(node_p node, hook_p hook, void *arg1, int arg2)
if (m == NULL)
break;
/* Peel the mbuf off any stale tags */
m_tag_delete_chain(m, NULL);
/*
* Berkeley packet filter.
* Pass packet to bpf if there is a listener.