K 10
svn:author
V 2
ae
K 8
svn:date
V 27
2016-11-19T19:06:29.359056Z
K 7
svn:log
V 797
Change ip_ipsec_output() to return only two values 0 and 1.

It returns 1 when IPSec consumes mbuf or some fatal error occured.
In case of error it frees mbuf. When no IPSec processing is required,
it returns zero. Also change its prototype to take mbuf pointer,
since we don't expect that mbuf can be changed, but not consumed.

Add IPSEC_OUTPUT() wrapper macro to hide call to ip_ipsec_output().
I guess such interface will be used by IPsec module.

Remove direction argument from ipsec4_checkpolicy(). This function is
intended to use only with OUTBOUND traffic.
Also change ipsec4_process_packet() to take security policy returned by
ipsec4_checkpolicy() instead of accession to ipsecrequest. Add inpcb
pointer to arguments list, it will be needed to update hdrsz field of
struct inpcbpolicy.

END