HomeFreeBSD

MFC r333497:

Description

MFC r333497:

Apply the change from r272770 to if_ipsec(4) interface.

It is guaranteed that if_ipsec(4) interface is used only for tunnel
mode IPsec, i.e. decrypted and decapsulated packet has its own IP header.
Thus we can consider it as new packet and clear the protocols flags.
This allows ICMP/ICMPv6 properly handle errors that may cause this packet.

PR:		[[ https://bugs.freebsd.org/228108 | 228108 ]]

Approved by: re (kib)

Details

Provenance
aeAuthored on
Parents
rS333784: amd64: tweak the read_frequently section
Branches
Unknown
Tags
Unknown