From: henning Date: Tue, 26 Aug 2008 12:18:01 +0000 (+0000) Subject: call pf_pkt_addr_changed instead of manually clearing the pf state key ptr X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=569615cb7aa03431aa1a5761010451e8bdf50199;p=openbsd call pf_pkt_addr_changed instead of manually clearing the pf state key ptr --- diff --git a/sys/netinet/ipsec_input.c b/sys/netinet/ipsec_input.c index 93ab99fa121..d91d5e99ac5 100644 --- a/sys/netinet/ipsec_input.c +++ b/sys/netinet/ipsec_input.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ipsec_input.c,v 1.88 2008/07/24 10:55:44 henning Exp $ */ +/* $OpenBSD: ipsec_input.c,v 1.89 2008/08/26 12:18:01 henning Exp $ */ /* * The authors of this code are John Ioannidis (ji@tla.org), * Angelos D. Keromytis (kermit@csd.uch.gr) and @@ -563,9 +563,7 @@ ipsec_common_input_cb(struct mbuf *m, struct tdb *tdbp, int skip, int protoff, /* Add pf tag if requested. */ if (pf_tag_packet(m, tdbp->tdb_tag, -1)) DPRINTF(("failed to tag ipsec packet\n")); - - /* clear state key ptr to prevent incorrect linking */ - m->m_pkthdr.pf.statekey = NULL; + pf_pkt_addr_changed(m); #endif if (tdbp->tdb_flags & TDBF_TUNNELING)