sys/net/ip6fw/ip6_fw.c: disable esp option

Hiroki Sato hrs at allbsd.org
Tue Dec 28 02:41:20 PST 2004


Hi,

 Here is a patch to disable the ESP option for ip6fw which does
 not work properly.

Fix conditions since ip6fw does not handle ESP correctly.

Obtained from:	FreeBSD (ip6_fw.c:1.2.2.9->1.2.2.10)

Index: ip6_fw.c
===================================================================
RCS file: /cvs/src/sys/net/ip6fw/ip6_fw.c,v
retrieving revision 1.10
diff -d -u -I\$FreeBSD:.*\$ -I\$NetBSD:.*\$ -I\$OpenBSD:.*\$ -I\$DragonFly:.*\$ -I\$Id:.*\$ -I\$hrs:.*\$ -r1.10 ip6_fw.c
--- ip6_fw.c	2 Aug 2004 13:22:33 -0000	1.10
+++ ip6_fw.c	28 Dec 2004 09:38:38 -0000
@@ -289,19 +289,17 @@
 			case IPPROTO_ESP:
 				opts &= ~IPV6_FW_IP6OPT_ESP;
 				nopts &= ~IPV6_FW_IP6OPT_ESP;
-				break;
+				goto opts_check;
 			case IPPROTO_NONE:
 				opts &= ~IPV6_FW_IP6OPT_NONXT;
 				nopts &= ~IPV6_FW_IP6OPT_NONXT;
 				goto opts_check;
-				break;
 			case IPPROTO_DSTOPTS:
 				opts &= ~IPV6_FW_IP6OPT_OPTS;
 				nopts &= ~IPV6_FW_IP6OPT_OPTS;
 				break;
 			default:
 				goto opts_check;
-				break;
 			}
 			*off += (ip6e->ip6e_len + 1) << 3;
 			break;
Attachment:
pgp00022.pgp
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pgp00022.pgp
Type: application/octet-stream
Size: 187 bytes
Desc: "Description: PGP signature"
URL: <http://lists.dragonflybsd.org/pipermail/submit/attachments/20041228/764b10ed/attachment-0013.obj>


More information about the Submit mailing list