The following reply was made to PR kern/36870; it has been noted by GNATS.

From: DEGROOTE Arnaud <degroote@netbsd.org>
To: gnats-bugs@NetBSD.org
Cc: 
Subject: PR/36870 CVS commit: src/sys
Date: Sat, 29 Dec 2007 14:53:25 +0000 (UTC)

 Module Name:	src
 Committed By:	degroote
 Date:		Sat Dec 29 14:53:25 UTC 2007
 
 Modified Files:
 	src/sys/netinet: ip_output.c
 	src/sys/netipsec: ipsec.c ipsec.h ipsec_output.c
 
 Log Message:
 Simplify the FAST_IPSEC output path
 Only record an IPSEC_OUT_DONE tag when we have finished the processing
 In ip{,6}_output, check this tag to know if we have already processed this
 packet.
 Remove some dead code (IPSEC_PENDING_TDB is not used in NetBSD)
 
 Fix pr/36870
 
 
 To generate a diff of this commit:
 cvs rdiff -r1.187 -r1.188 src/sys/netinet/ip_output.c
 cvs rdiff -r1.35 -r1.36 src/sys/netipsec/ipsec.c
 cvs rdiff -r1.20 -r1.21 src/sys/netipsec/ipsec.h
 cvs rdiff -r1.24 -r1.25 src/sys/netipsec/ipsec_output.c
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.