CVS commit: [netbsd-2-1] src/sys/netipsec

[Manuel Bouyer <bouyer%netbsd.org@localhost>]

Module Name:    src
Committed By:   bouyer
Date:           Sat Dec  1 17:32:31 UTC 2007

Modified Files:
        src/sys/netipsec [netbsd-2-1]: ipsec.c ipsec_osdep.h ipsec_output.c
            xform_ah.c xform_ipip.c

Log Message:
Pull up following revision(s) (requested by adrianp in ticket #11395):
        sys/netipsec/xform_ah.c: revision 1.19 via patch
        sys/netipsec/ipsec.c: revision 1.34 via patch
        sys/netipsec/xform_ipip.c: revision 1.18 via patch
        sys/netipsec/ipsec_output.c: revision 1.23 via patch
        sys/netipsec/ipsec_osdep.h: revision 1.21 via patch
The function ipsec4_get_ulp assumes that ip_off is in host order. This results
in IPsec processing that is dependent on protocol and/or port can be bypassed.
Bug report, analysis and initial fix from Karl Knutsson.
Final patch and ok from degroote@


To generate a diff of this commit:
cvs rdiff -r1.10.2.1 -r1.10.2.1.4.1 src/sys/netipsec/ipsec.c
cvs rdiff -r1.9.2.1 -r1.9.2.1.4.1 src/sys/netipsec/ipsec_osdep.h
cvs rdiff -r1.12.2.1 -r1.12.2.1.4.1 src/sys/netipsec/ipsec_output.c
cvs rdiff -r1.6.2.1 -r1.6.2.1.4.1 src/sys/netipsec/xform_ah.c
cvs rdiff -r1.9 -r1.9.16.1 src/sys/netipsec/xform_ipip.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.