summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorbms <bms@FreeBSD.org>2009-04-29 11:15:58 +0000
committerbms <bms@FreeBSD.org>2009-04-29 11:15:58 +0000
commit0915b81c7646c45ceab3d001dcbfbb6e4734f61a (patch)
tree4e2f6b483acdbbf3eb6fcb7575bb038eed86f397
parent027b0363c69adf0032001c346d2b30774b2042e9 (diff)
downloadFreeBSD-src-0915b81c7646c45ceab3d001dcbfbb6e4734f61a.zip
FreeBSD-src-0915b81c7646c45ceab3d001dcbfbb6e4734f61a.tar.gz
Stub out IN6_LOOKUP_MULTI() for GETSPI requests, for now.
This has the effect that IPv6 multicast traffic won't trigger an SPI allocation when IPSEC is in use, however, this obviously needs to stomp on locks, and IN6_LOOKUP_MULTI() is about to go away. This definitely needs to be revisited before 8.x is branched as a release branch.
-rw-r--r--sys/netipsec/key.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/sys/netipsec/key.c b/sys/netipsec/key.c
index 24a3139..0d60149 100644
--- a/sys/netipsec/key.c
+++ b/sys/netipsec/key.c
@@ -3765,13 +3765,16 @@ key_ismyaddr6(sin6)
{
INIT_VNET_INET6(curvnet);
struct in6_ifaddr *ia;
+#if 0
struct in6_multi *in6m;
+#endif
for (ia = V_in6_ifaddr; ia; ia = ia->ia_next) {
if (key_sockaddrcmp((struct sockaddr *)&sin6,
(struct sockaddr *)&ia->ia_addr, 0) == 0)
return 1;
+#if 0
/*
* XXX Multicast
* XXX why do we care about multlicast here while we don't care
@@ -3782,6 +3785,7 @@ key_ismyaddr6(sin6)
IN6_LOOKUP_MULTI(sin6->sin6_addr, ia->ia_ifp, in6m);
if (in6m)
return 1;
+#endif
}
/* loopback, just for safety */
OpenPOWER on IntegriCloud