From owner-svn-src-all@FreeBSD.ORG Wed Apr 29 11:15:58 2009 Return-Path: Delivered-To: svn-src-all@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B9F71106564A; Wed, 29 Apr 2009 11:15:58 +0000 (UTC) (envelope-from bms@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:4f8:fff6::2c]) by mx1.freebsd.org (Postfix) with ESMTP id A86938FC08; Wed, 29 Apr 2009 11:15:58 +0000 (UTC) (envelope-from bms@FreeBSD.org) Received: from svn.freebsd.org (localhost [127.0.0.1]) by svn.freebsd.org (8.14.3/8.14.3) with ESMTP id n3TBFwqb079043; Wed, 29 Apr 2009 11:15:58 GMT (envelope-from bms@svn.freebsd.org) Received: (from bms@localhost) by svn.freebsd.org (8.14.3/8.14.3/Submit) id n3TBFwQj079042; Wed, 29 Apr 2009 11:15:58 GMT (envelope-from bms@svn.freebsd.org) Message-Id: <200904291115.n3TBFwQj079042@svn.freebsd.org> From: Bruce M Simpson Date: Wed, 29 Apr 2009 11:15:58 +0000 (UTC) To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org X-SVN-Group: head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Cc: Subject: svn commit: r191663 - head/sys/netipsec X-BeenThere: svn-src-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "SVN commit messages for the entire src tree \(except for " user" and " projects" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Apr 2009 11:15:59 -0000 Author: bms Date: Wed Apr 29 11:15:58 2009 New Revision: 191663 URL: http://svn.freebsd.org/changeset/base/191663 Log: Stub out IN6_LOOKUP_MULTI() for GETSPI requests, for now. This has the effect that IPv6 multicast traffic won't trigger an SPI allocation when IPSEC is in use, however, this obviously needs to stomp on locks, and IN6_LOOKUP_MULTI() is about to go away. This definitely needs to be revisited before 8.x is branched as a release branch. Modified: head/sys/netipsec/key.c Modified: head/sys/netipsec/key.c ============================================================================== --- head/sys/netipsec/key.c Wed Apr 29 10:22:44 2009 (r191662) +++ head/sys/netipsec/key.c Wed Apr 29 11:15:58 2009 (r191663) @@ -3765,13 +3765,16 @@ key_ismyaddr6(sin6) { INIT_VNET_INET6(curvnet); struct in6_ifaddr *ia; +#if 0 struct in6_multi *in6m; +#endif for (ia = V_in6_ifaddr; ia; ia = ia->ia_next) { if (key_sockaddrcmp((struct sockaddr *)&sin6, (struct sockaddr *)&ia->ia_addr, 0) == 0) return 1; +#if 0 /* * XXX Multicast * XXX why do we care about multlicast here while we don't care @@ -3782,6 +3785,7 @@ key_ismyaddr6(sin6) IN6_LOOKUP_MULTI(sin6->sin6_addr, ia->ia_ifp, in6m); if (in6m) return 1; +#endif } /* loopback, just for safety */