From: bluhm <bluhm@openbsd.org>
Date: Mon, 29 Aug 2022 14:43:56 +0000 (+0000)
Subject: Do not calculate the output protocol checksum in the IP input path.
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=4628c0e6cf9bd4a6d679c314ad820807bc892ac2;p=openbsd

Do not calculate the output protocol checksum in the IP input path.
This logic was introduced in 2013 when pf checksum fixup was
temporarily removed.  After restoring the pf bahavior in 2016, it
should not be necessary anymore.
OK claudio@
---

diff --git a/sys/netinet/ip_input.c b/sys/netinet/ip_input.c
index affe27038c6..37c18d2efb2 100644
--- a/sys/netinet/ip_input.c
+++ b/sys/netinet/ip_input.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: ip_input.c,v 1.380 2022/08/21 14:15:55 bluhm Exp $	*/
+/*	$OpenBSD: ip_input.c,v 1.381 2022/08/29 14:43:56 bluhm Exp $	*/
 /*	$NetBSD: ip_input.c,v 1.30 1996/03/16 23:53:58 christos Exp $	*/
 
 /*
@@ -683,18 +683,6 @@ ip_deliver(struct mbuf **mp, int *offp, int nxt, int af)
 
 	NET_ASSERT_LOCKED_EXCLUSIVE();
 
-	/* pf might have modified stuff, might have to chksum */
-	switch (af) {
-	case AF_INET:
-		in_proto_cksum_out(*mp, NULL);
-		break;
-#ifdef INET6
-	case AF_INET6:
-		in6_proto_cksum_out(*mp, NULL);
-		break;
-#endif /* INET6 */
-	}
-
 	/*
 	 * Tell launch routine the next header
 	 */