From 4a5d9d5dd3dfb4c03c8d3ff47b1ac35206dcae01 Mon Sep 17 00:00:00 2001 From: gnn Date: Sat, 25 Mar 2006 13:38:52 +0000 Subject: First steps towards IPSec cleanup. Make the kernel side of FAST_IPSEC not depend on the shared structures defined in /usr/include/net/pfkeyv2.h The kernel now defines all the necessary in kernel structures in sys/netipsec/keydb.h and does the proper massaging when moving messages around. Sponsored By: Secure Computing --- sys/netipsec/xform_tcp.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'sys/netipsec/xform_tcp.c') diff --git a/sys/netipsec/xform_tcp.c b/sys/netipsec/xform_tcp.c index c70d70a..a401548 100644 --- a/sys/netipsec/xform_tcp.c +++ b/sys/netipsec/xform_tcp.c @@ -117,7 +117,7 @@ tcpsignature_zeroize(struct secasvar *sav) { if (sav->key_auth) - bzero(_KEYBUF(sav->key_auth), _KEYLEN(sav->key_auth)); + bzero(sav->key_auth->key_data, _KEYLEN(sav->key_auth)); sav->tdb_cryptoid = 0; sav->tdb_authalgxform = NULL; -- cgit v1.1