aboutsummaryrefslogtreecommitdiff
path: root/sys/netipsec
diff options
context:
space:
mode:
authorAllan Jude <allanjude@FreeBSD.org>2024-01-16 23:12:30 +0000
committerAllan Jude <allanjude@FreeBSD.org>2024-01-16 23:15:00 +0000
commitdc02374f54455e354495870c24f86bb2966a7960 (patch)
treea17abf3cc3ea5c8924bbab464b529a291c165730 /sys/netipsec
parent61c831679615d2a03a494bd7f3627fb945f2795c (diff)
downloadsrc-dc02374f54455e354495870c24f86bb2966a7960.tar.gz
src-dc02374f54455e354495870c24f86bb2966a7960.zip
Fix KASSERT in 80044c78 causing build failures
Move the KASSERT to where struct ip6_hdr is populated Fixes: 80044c785cb040a2cf73779d23f9e1e81a00c6c3 Reported-by: bapt Reviewed-by: markj Sponsored-by: Klara, Inc.
Diffstat (limited to 'sys/netipsec')
-rw-r--r--sys/netipsec/udpencap.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/netipsec/udpencap.c b/sys/netipsec/udpencap.c
index 960e7d3d1c9f..e5b286b5ae69 100644
--- a/sys/netipsec/udpencap.c
+++ b/sys/netipsec/udpencap.c
@@ -259,8 +259,6 @@ udp_ipsec_output(struct mbuf *m, struct secasvar *sav)
#endif
#ifdef INET6
case AF_INET6:
- KASSERT(ip6->ip6_nxt == IPPROTO_ESP,
- ("unexpected next header type %d", ip->ip6_nxt));
hlen = sizeof(struct ip6_hdr);
break;
#endif
@@ -297,6 +295,8 @@ udp_ipsec_output(struct mbuf *m, struct secasvar *sav)
struct ip6_hdr *ip6;
ip6 = mtod(m, struct ip6_hdr *);
+ KASSERT(ip6->ip6_nxt == IPPROTO_ESP,
+ ("unexpected next header type %d", ip6->ip6_nxt));
ip6->ip6_plen = htons(m->m_pkthdr.len);
ip6->ip6_nxt = IPPROTO_UDP;
udp->uh_sum = in6_cksum_pseudo(ip6,