summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorniklas <niklas@openbsd.org>1999-09-29 09:11:21 +0000
committerniklas <niklas@openbsd.org>1999-09-29 09:11:21 +0000
commitce5e228925240c86e42f5cd48c96972ed2ac4ec2 (patch)
tree6432d0e499779749ace83e94e5eca746176f2e97
parentchmod devices needed for x by default when logging in at console (diff)
downloadwireguard-openbsd-ce5e228925240c86e42f5cd48c96972ed2ac4ec2.tar.xz
wireguard-openbsd-ce5e228925240c86e42f5cd48c96972ed2ac4ec2.zip
Critical reliability fix for IPsec. On i386 splsoftclock is not
a perfect emulation of a "real" architecture's splsoftclock, as it assumes it is only invoked from higher spl levels. Use splsoftnet instead.
-rw-r--r--sys/netinet/ip_ipsp.h8
1 files changed, 5 insertions, 3 deletions
diff --git a/sys/netinet/ip_ipsp.h b/sys/netinet/ip_ipsp.h
index 70d404137aa..bbb148b8e91 100644
--- a/sys/netinet/ip_ipsp.h
+++ b/sys/netinet/ip_ipsp.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: ip_ipsp.h,v 1.41 1999/08/10 11:35:26 ho Exp $ */
+/* $OpenBSD: ip_ipsp.h,v 1.42 1999/09/29 09:11:21 niklas Exp $ */
/*
* The authors of this code are John Ioannidis (ji@tla.org),
@@ -397,9 +397,11 @@ htonq(u_int64_t q)
/*
* Protects all tdb lists.
- * Must at least be splsoftclock.
+ * Must at least be splsoftnet (note: do not use splsoftclock as it is
+ * special on some architectures, assuming it is always an spl lowering
+ * operation).
*/
-#define spltdb splsoftclock
+#define spltdb splsoftnet
extern int encdebug;
extern int ipsec_in_use;