From 6508929bc2287f06be160b28ce9222914222069d Mon Sep 17 00:00:00 2001 From: "Andrey V. Elsukov" Date: Tue, 28 Apr 2015 11:03:47 +0000 Subject: [PATCH] Fix the comment. We will not do SPD lookup again, because ip[6]_ipsec_output() will find PACKET_TAG_IPSEC_OUT_DONE mbuf tag. Sponsored by: Yandex LLC --- sys/netipsec/ipsec_output.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/sys/netipsec/ipsec_output.c b/sys/netipsec/ipsec_output.c index c08ac3aca814..ae360700b629 100644 --- a/sys/netipsec/ipsec_output.c +++ b/sys/netipsec/ipsec_output.c @@ -206,8 +206,7 @@ ipsec_process_done(struct mbuf *m, struct ipsecrequest *isr) /* * We're done with IPsec processing, transmit the packet using the - * appropriate network protocol (IP or IPv6). SPD lookup will be - * performed again there. + * appropriate network protocol (IP or IPv6). */ switch (saidx->dst.sa.sa_family) { #ifdef INET