The branch main has been updated by jhb: URL: https://cgit.FreeBSD.org/src/commit/?id=4046178557e1e78ff830c2cfb17e10627ccecd37
commit 4046178557e1e78ff830c2cfb17e10627ccecd37 Author: John Baldwin <[email protected]> AuthorDate: 2022-04-13 23:08:21 +0000 Commit: John Baldwin <[email protected]> CommitDate: 2022-04-13 23:08:21 +0000 ipsec_encap: setdf is only used for INET. --- sys/netipsec/ipsec_output.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/sys/netipsec/ipsec_output.c b/sys/netipsec/ipsec_output.c index b0298f8145d4..26588db6371b 100644 --- a/sys/netipsec/ipsec_output.c +++ b/sys/netipsec/ipsec_output.c @@ -1082,7 +1082,9 @@ ipsec_encap(struct mbuf **mp, struct secasindex *saidx) struct ip6_hdr *ip6; #endif struct ip *ip; +#ifdef INET int setdf; +#endif uint8_t itos, proto; ip = mtod(*mp, struct ip *); @@ -1110,7 +1112,6 @@ ipsec_encap(struct mbuf **mp, struct secasindex *saidx) proto = IPPROTO_IPV6; ip6 = mtod(*mp, struct ip6_hdr *); itos = (ntohl(ip6->ip6_flow) >> 20) & 0xff; - setdf = V_ip4_ipsec_dfbit ? 1: 0; /* scoped address handling */ in6_clearscope(&ip6->ip6_src); in6_clearscope(&ip6->ip6_dst);
