diff options
| author | ume <ume@FreeBSD.org> | 2001-07-26 19:19:49 +0000 |
|---|---|---|
| committer | ume <ume@FreeBSD.org> | 2001-07-26 19:19:49 +0000 |
| commit | e8ae8d1bf4f1b0d1984c5a45d58d8994cbee6d48 (patch) | |
| tree | 8e3bd5ef7aeeff3d2485710cc7d3d4eeb27b0586 /sys/netinet/ip_divert.c | |
| parent | 0a0f3b54c3fa214be9208289900f9ef8ff4e3284 (diff) | |
| download | FreeBSD-src-e8ae8d1bf4f1b0d1984c5a45d58d8994cbee6d48.zip FreeBSD-src-e8ae8d1bf4f1b0d1984c5a45d58d8994cbee6d48.tar.gz | |
move ipsec security policy allocation into in_pcballoc, before
making pcbs available to the outside world. otherwise, we will see
inpcb without ipsec security policy attached (-> panic() in ipsec.c).
Obtained from: KAME
MFC after: 3 days
Diffstat (limited to 'sys/netinet/ip_divert.c')
| -rw-r--r-- | sys/netinet/ip_divert.c | 7 |
1 files changed, 0 insertions, 7 deletions
diff --git a/sys/netinet/ip_divert.c b/sys/netinet/ip_divert.c index df5ec22..665558f 100644 --- a/sys/netinet/ip_divert.c +++ b/sys/netinet/ip_divert.c @@ -361,13 +361,6 @@ div_attach(struct socket *so, int proto, struct proc *p) /* The socket is always "connected" because we always know "where" to send the packet */ so->so_state |= SS_ISCONNECTED; -#ifdef IPSEC - error = ipsec_init_policy(so, &inp->inp_sp); - if (error != 0) { - in_pcbdetach(inp); - return error; - } -#endif /*IPSEC*/ return 0; } |
