K 10
svn:author
V 2
ae
K 8
svn:date
V 27
2016-12-13T22:40:09.923671Z
K 7
svn:log
V 473
Fix the problem with SP PCB cache.

tcp_input() uses ipsec[46]_in_reject() to check mbuf agaist inbound
security policies. We use SP PCB cache to store result of policy lookup
in the given inpcb. If inpcb belongs to listening socket that is bound
to ANY address, the lookup result for another connection may differs.
Thus cached policy will prevent another connection establishing.

Store inbound policy in the cache only if local address in PCB isn't
equal to INADDR_ANY.

END