Andrey V. Elsukov 18b105c27b Add direction argument to ipsec_setspidx_inpcb() function. ... This function is used only by ipsec_getpolicybysock() to fill security policy index selector for locally generated packets (that have INPCB). The function incorrectly assumes that spidx is the same for both directions. Fix this by using new direction argument to specify correct INPCB security policy - sp_in or sp_out. There is no need to fill both policy indeces, because they are overwritten for each packet. This fixes security policy matching for outbound packets when user has specified TCP/UDP ports in the security policy upperspec. PR: 213869 MFC after: 1 week		2017-01-08 12:40:07 +00:00
..
ah_var.h
ah.h
esp_var.h
esp.h
ipcomp_var.h
ipcomp.h
ipsec6.h
ipsec_input.c
ipsec_mbuf.c
ipsec_output.c
ipsec.c	Add direction argument to ipsec_setspidx_inpcb() function.	2017-01-08 12:40:07 +00:00
ipsec.h
key_debug.c	netipsec: fix build after 309144	2016-11-26 00:59:01 +00:00
key_debug.h
key_var.h
key.c	IPsec RFC6479 support for replay window sizes up to 2^32 - 32 packets.	2016-11-25 14:44:49 +00:00
key.h
keydb.h	Add a missing header	2016-11-26 23:15:11 +00:00
keysock.c
keysock.h
xform_ah.c	IPsec RFC6479 support for replay window sizes up to 2^32 - 32 packets.	2016-11-25 14:44:49 +00:00
xform_esp.c	IPsec RFC6479 support for replay window sizes up to 2^32 - 32 packets.	2016-11-25 14:44:49 +00:00
xform_ipcomp.c
xform_tcp.c
xform.h