>Number:         25679
>Category:       kern
>Synopsis:       Can't build kernel with both TCP_SIGNATURE and FAST_IPSEC
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Sun May 23 00:18:00 UTC 2004
>Closed-Date:
>Last-Modified:
>Originator:     
>Release:        NetBSD 2.0E 20040521
>Organization:
>Environment:
	
	
System: NetBSD md5test.boogers.sf.ca.us 2.0E NetBSD 2.0E (MD5TEST) #4: Sat May 22 15:42:58 PDT 2004  riz@lychee.tastylime.net:/usr/src-current/sys/arch/i386/compile/MD5TEST i386
Architecture: i386
Machine: i386
>Description:
	Can't build a kernel with both "options TCP_SIGNATURE" and 
	options "FAST_IPSEC" because of an unused variable warning.
>How-To-Repeat:

	Configure a kernel for i386 from this file:

include "arch/i386/conf/GENERIC.MP"
options TCP_SIGNATURE
options FAST_IPSEC

>Fix:

Apply the following patch in /usr/src/sys:

Index: ./netinet/tcp_input.c
===================================================================
RCS file: /usr/mirror/main/src/sys/netinet/tcp_input.c,v
retrieving revision 1.206
diff -u -r1.206 tcp_input.c
--- ./netinet/tcp_input.c	18 May 2004 14:44:14 -0000	1.206
+++ ./netinet/tcp_input.c	23 May 2004 00:11:12 -0000
@@ -2826,9 +2826,6 @@
 
 #ifdef TCP_SIGNATURE
 	if (tp->t_flags & TF_SIGNATURE) {
-#ifdef FAST_IPSEC
-		union sockaddr_union dst;
-#endif
 
 		sav = tcp_signature_getsav(m, th);
 
>Release-Note:
>Audit-Trail:
>Unformatted: