diff options
| author | ae <ae@FreeBSD.org> | 2016-03-18 09:03:00 +0000 |
|---|---|---|
| committer | ae <ae@FreeBSD.org> | 2016-03-18 09:03:00 +0000 |
| commit | cc517eb911dbaaec93f80ed00d2caeff4ff4cd35 (patch) | |
| tree | e594e721251c6eb11c6dd7b3e3c98c91a3584e3f | |
| parent | f935438dcf193a38b91ac0a79a1ca4fa9f4829ad (diff) | |
| download | FreeBSD-src-cc517eb911dbaaec93f80ed00d2caeff4ff4cd35.zip FreeBSD-src-cc517eb911dbaaec93f80ed00d2caeff4ff4cd35.tar.gz | |
Fix handling of net.inet.ipsec.dfbit=2 variable.
IP_DF macro is in host bytes order, but ip_off field is in network bytes
order. So, use htons() for correct check.
| -rw-r--r-- | sys/netipsec/ipsec_output.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/netipsec/ipsec_output.c b/sys/netipsec/ipsec_output.c index 1523e0b..e0523d4 100644 --- a/sys/netipsec/ipsec_output.c +++ b/sys/netipsec/ipsec_output.c @@ -441,7 +441,7 @@ ipsec_encap(struct mbuf **mp, struct secasindex *saidx) setdf = V_ip4_ipsec_dfbit; break; default:/* propagate to outer header */ - setdf = (ip->ip_off & ntohs(IP_DF)) != 0; + setdf = (ip->ip_off & htons(IP_DF)) != 0; } itos = ip->ip_tos; break; |
