Do not call ip_deliver() recursively from IPsec. As there is no
authorbluhm <bluhm@openbsd.org>
Thu, 11 Nov 2021 18:08:17 +0000 (18:08 +0000)
committerbluhm <bluhm@openbsd.org>
Thu, 11 Nov 2021 18:08:17 +0000 (18:08 +0000)
commitbec0ed23d13fd98966ae8ddab555e0b00e36cf46
treef2e9223ed7c32129d42abc2179a578930583c22a
parent4b8b54725d50e90d59484e9e095f90950aad6d32
Do not call ip_deliver() recursively from IPsec.  As there is no
crypto task anymore, it is possible to return the next protocol.
Then ip_deliver() will walk the header chain in its loop.
IPsec bridge(4) tested by jan@
OK mvs@ tobhe@ jan@
sys/net/if_bridge.c
sys/netinet/ip_ah.c
sys/netinet/ip_esp.c
sys/netinet/ip_ipcomp.c
sys/netinet/ipsec_input.c
sys/netinet/tcp_subr.c
sys/netinet/udp_usrreq.c