CVSROOT: /cvs
Module name: src
Changes by: [email protected] 2021/06/18 09:34:21
Modified files:
sys/netinet : ip_ah.c ip_esp.c ip_ipcomp.c ipsec_input.c
ipsec_output.c
Log message:
The crypto(9) framework used by IPsec runs on a kernel task that
is protected by kernel lock. There were crashes in swcr_authenc()
when it was accessing swcr_sessions. As a quick fix, protect all
calls from network stack to crypto with kernel lock. This also
covers the rekeying case that is called from pfkey via tdb_init().
OK mvs@
