Subject: Re: ipsec.c patch to reduce kernel stack usage
To: YAMAMOTO Takashi <>
From: None <>
List: tech-net
Date: 06/27/2002 20:20:01
>why not?
>a big structure, secasindex is allocated on stack in ipsec4_output
>and it isn't necessary after calling key_checkrequest.
>so maximum usage of stack can be reduced by separation.
>(i'm assuming that esp4_output uses more stack than key_checkrequest.)
>actually, stack overflow i saw recently is almost gone
>with this patch and one for wd.c that i post to tech-kern.

	ok, i got your point.  let me import it to kame first, then to netbsd.
	please don't commit it.  i will.