diff options
| author | Jonathan Lemon <jlemon@FreeBSD.org> | 2003-02-24 02:06:02 +0000 |
|---|---|---|
| committer | Jonathan Lemon <jlemon@FreeBSD.org> | 2003-02-24 02:06:02 +0000 |
| commit | 9c3309d174dda72962f1b965cdf33b5c64f65008 (patch) | |
| tree | de83bccd479ad533bf6ec62a670a646af98de867 /sys/netipsec | |
| parent | ffab7ba849e11cf6a1c37a757a8443cac5ec531c (diff) | |
Notes
Diffstat (limited to 'sys/netipsec')
| -rw-r--r-- | sys/netipsec/ipsec.c | 26 |
1 files changed, 5 insertions, 21 deletions
diff --git a/sys/netipsec/ipsec.c b/sys/netipsec/ipsec.c index 2e765e0199c2..59c598613e9c 100644 --- a/sys/netipsec/ipsec.c +++ b/sys/netipsec/ipsec.c @@ -280,7 +280,6 @@ ipsec_getpolicybysock(m, dir, inp, error) struct inpcbpolicy *pcbsp = NULL; struct secpolicy *currsp = NULL; /* policy on socket */ struct secpolicy *sp; - int af; KASSERT(m != NULL, ("ipsec_getpolicybysock: null mbuf")); KASSERT(inp != NULL, ("ipsec_getpolicybysock: null inpcb")); @@ -288,26 +287,13 @@ ipsec_getpolicybysock(m, dir, inp, error) KASSERT(dir == IPSEC_DIR_INBOUND || dir == IPSEC_DIR_OUTBOUND, ("ipsec_getpolicybysock: invalid direction %u", dir)); - af = inp->inp_socket->so_proto->pr_domain->dom_family; - KASSERT(af == AF_INET || af == AF_INET6, - ("ipsec_getpolicybysock: unexpected protocol family %u", af)); - - switch (af) { - case AF_INET: - /* set spidx in pcb */ - *error = ipsec4_setspidx_inpcb(m, inp); - pcbsp = inp->inp_sp; - break; -#ifdef INET6 - case AF_INET6: - /* set spidx in pcb */ + /* set spidx in pcb */ + if (inp->inp_vflag & INP_IPV6PROTO) { *error = ipsec6_setspidx_in6pcb(m, inp); pcbsp = inp->in6p_sp; - break; -#endif - default: - *error = EPFNOSUPPORT; - break; + } else { + *error = ipsec4_setspidx_inpcb(m, inp); + pcbsp = inp->inp_sp; } if (*error) return NULL; @@ -1571,8 +1557,6 @@ ipsec4_hdrsiz(m, dir, inp) size_t size; KASSERT(m != NULL, ("ipsec4_hdrsiz: null mbuf")); - KASSERT(inp == NULL || inp->inp_socket != NULL, - ("ipsec4_hdrsize: socket w/o inpcb")); /* get SP for this packet. * When we are called from ip_forward(), we call |