CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2021/11/11 11:08:18
Modified files:
sys/net : if_bridge.c
sys/netinet : ip_ah.c ip_esp.c ip_ipcomp.c ipsec_input.c
tcp_subr.c udp_usrreq.c
Log message:
Do not call ip_deliver() recursively from IPsec. As there is no
crypto task anymore, it is possible to return the next protocol.
Then ip_deliver() will walk the header chain in its loop.
IPsec bridge(4) tested by jan@
OK mvs@ tobhe@ jan@
