d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix two SA refcount:

Browse Source 
- AH does not release the SA like in ESP/IPCOMP when handling EAGAIN
- ipsec_process_done incorrectly release the SA.

Reviewed by:	vanhu
MFC after:	1 week
This commit is contained in:
Fabien Thomas 2011-03-31 13:14:24 +00:00
parent e9e237190b
commit 11d2f4df50
2 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
sys/netipsec/ipsec_output.c
View File

@ -247,7 +247,6 @@ ipsec_process_done(struct mbuf *m, struct ipsecrequest *isr)
panic("ipsec_process_done"); panic("ipsec_process_done");
bad: bad:
m_freem(m); m_freem(m);
KEY_FREESAV(&sav);
return (error); return (error);
} }

1
sys/netipsec/xform_ah.c
View File

@ -785,6 +785,7 @@ ah_input_cb(struct cryptop *crp)
sav->tdb_cryptoid = crp->crp_sid; sav->tdb_cryptoid = crp->crp_sid;
if (crp->crp_etype == EAGAIN) { if (crp->crp_etype == EAGAIN) {
KEY_FREESAV(&sav);
error = crypto_dispatch(crp); error = crypto_dispatch(crp);
return error; return error;
} }