Stop rolling our own ip6_hdr_pseudo{}. This actually lives in <netinet/ip6.h>.
Use it in netipsec/xform_tcp.c, with a C99 block-scope designated-initializer.
There are probably other refactoring candidates.
The CTASSERT()s were obtained from NetBSD and added to ip6_input.c.
Prerequisite for merging Andre Oppermann's (unfinished) TCP-AO implementation.
Obtained from: NetBSD, OpenBSD