diff options
| author |   henning <henning@openbsd.org> | 2008-08-26 12:19:01 +0000 |
|---|---|---|
| committer | henning <henning@openbsd.org> | 2008-08-26 12:19:01 +0000 |
| commit | 052ea9d279872ebed2f5ec914de7a4d0c9af6bd0 (patch) | |
| tree | 6e5cc583b81a8f8fe64682f43d224cbc99eb423b | |
| parent | call pf_pkt_addr_changed instead of manually clearing the pf state key ptr (diff) | |
| download | wireguard-openbsd-052ea9d279872ebed2f5ec914de7a4d0c9af6bd0.tar.xz wireguard-openbsd-052ea9d279872ebed2f5ec914de7a4d0c9af6bd0.zip | |
we need to call pf_pkt_addr_changed here too. found by david
| -rw-r--r-- | sys/netinet/ipsec_output.c | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/sys/netinet/ipsec_output.c b/sys/netinet/ipsec_output.c index 9f993c073be..24f7654e105 100644 --- a/sys/netinet/ipsec_output.c +++ b/sys/netinet/ipsec_output.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ipsec_output.c,v 1.40 2008/08/21 23:05:30 bluhm Exp $ */ +/* $OpenBSD: ipsec_output.c,v 1.41 2008/08/26 12:19:01 henning Exp $ */ /* * The author of this code is Angelos D. Keromytis (angelos@cis.upenn.edu) * @@ -502,6 +502,7 @@ ipsp_process_done(struct mbuf *m, struct tdb *tdb) /* Add pf tag if requested. */ if (pf_tag_packet(m, tdb->tdb_tag, -1)) DPRINTF(("failed to tag ipsec packet\n")); + pf_pkt_addr_changed(m); #endif /* |