The following reply was made to PR kern/36051; it has been noted by GNATS.

From: DEGROOTE Arnaud <degroote@netbsd.org>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: PR/36051 CVS commit: src/sys
Date: Sun, 25 Mar 2007 12:46:43 +0000 (UTC)

 Module Name:	src
 Committed By:	degroote
 Date:		Sun Mar 25 12:46:43 UTC 2007
 
 Modified Files:
 	src/sys/netinet6: ipsec.c
 	src/sys/netipsec: ipsec.c
 
 Log Message:
 Make an exact match when we are looking for a cached sp for an unconnected
 socket. If we don't make an exact match, we may use a cached rule which
 has lower priority than a rule that would otherwise have matched the
 packet.
 
 Code submitted by Karl Knutsson in PR/36051
 
 
 To generate a diff of this commit:
 cvs rdiff -r1.115 -r1.116 src/sys/netinet6/ipsec.c
 cvs rdiff -r1.28 -r1.29 src/sys/netipsec/ipsec.c
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.