The branch main has been updated by tuexen:

URL: 
https://cgit.FreeBSD.org/src/commit/?id=74d330943b572a6f17f45b7c9c2035bde2956380

commit 74d330943b572a6f17f45b7c9c2035bde2956380
Author:     Michael Tuexen <[email protected]>
AuthorDate: 2026-09-04 07:37:45 +0000
Commit:     Michael Tuexen <[email protected]>
CommitDate: 2026-09-04 07:37:45 +0000

    tcp md5: improve consistency
    
    All other usages of SCF_SIGNATURE are protected by IPSEC_SUPPORT
    or TCP_SIGNATURE.
    No functional change intended.
    
    Reported by:    Hannes Elfert
    MFC after:      1 week
    MFC to:         stable/14
    MFC to:         stable/15
---
 sys/netinet/tcp_syncache.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/sys/netinet/tcp_syncache.c b/sys/netinet/tcp_syncache.c
index 3a447703b628..d6583db4c15d 100644
--- a/sys/netinet/tcp_syncache.c
+++ b/sys/netinet/tcp_syncache.c
@@ -2385,8 +2385,10 @@ syncookie_expand(struct in_conninfo *inc, const struct 
syncache_head *sch,
                sc->sc_tsoff = tcp_new_ts_offset(inc);
        }
 
+#if defined(IPSEC_SUPPORT) || defined(TCP_SIGNATURE)
        if (to->to_flags & TOF_SIGNATURE)
                sc->sc_flags |= SCF_SIGNATURE;
+#endif
 
        sc->sc_rxmits = 0;
 

Reply via email to