From 6a485e417ac3a2996d760532faaf5a48a890d223 Mon Sep 17 00:00:00 2001 From: glebius Date: Tue, 23 Oct 2012 08:22:01 +0000 Subject: - Fix one more miss from r241913. - Add XXX comment about necessity of the entire block, that "fixes up" the IP header. --- sys/netipsec/ipsec_input.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) (limited to 'sys/netipsec') diff --git a/sys/netipsec/ipsec_input.c b/sys/netipsec/ipsec_input.c index a004aef..b3349d5 100644 --- a/sys/netipsec/ipsec_input.c +++ b/sys/netipsec/ipsec_input.c @@ -328,7 +328,10 @@ ipsec4_common_input_cb(struct mbuf *m, struct secasvar *sav, } if (skip != 0) { - /* Fix IPv4 header */ + /* + * Fix IPv4 header + * XXXGL: do we need this entire block? + */ if (m->m_len < skip && (m = m_pullup(m, skip)) == NULL) { DPRINTF(("%s: processing failed for SA %s/%08lx\n", __func__, ipsec_address(&sav->sah->saidx.dst), @@ -341,7 +344,6 @@ ipsec4_common_input_cb(struct mbuf *m, struct secasvar *sav, ip = mtod(m, struct ip *); ip->ip_len = htons(m->m_pkthdr.len); - ip->ip_off = htons(ip->ip_off); ip->ip_sum = 0; ip->ip_sum = in_cksum(m, ip->ip_hl << 2); } else { -- cgit v1.1