Module Name:	src
Committed By:	degroote
Date:		Sun Mar 25 12:46:43 UTC 2007

Modified Files:
	src/sys/netinet6: ipsec.c
	src/sys/netipsec: ipsec.c

Log Message:
Make an exact match when we are looking for a cached sp for an unconnected
socket. If we don't make an exact match, we may use a cached rule which
has lower priority than a rule that would otherwise have matched the
packet.

Code submitted by Karl Knutsson in PR/36051


To generate a diff of this commit:
cvs rdiff -r1.115 -r1.116 src/sys/netinet6/ipsec.c
cvs rdiff -r1.28 -r1.29 src/sys/netipsec/ipsec.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.