PR/53334 CVS commit: src

["Maxime Villard" <maxv%netbsd.org@localhost>]

The following reply was made to PR standards/53334; it has been noted by GNATS.

From: "Maxime Villard" <maxv%netbsd.org@localhost>
To: gnats-bugs%gnats.NetBSD.org@localhost
Cc: 
Subject: PR/53334 CVS commit: src
Date: Thu, 31 May 2018 07:03:58 +0000

 Module Name:	src
 Committed By:	maxv
 Date:		Thu May 31 07:03:57 UTC 2018
 
 Modified Files:
 	src/share/man/man4: udp.4
 	src/sys/netinet: in_pcb.h udp_usrreq.c
 	src/sys/netipsec: ipsec_output.c ipsecif.c
 
 Log Message:
 Remove support for non-IKE markers in the kernel. Discussed on tech-net@,
 and now in PR/53334. Basically non-IKE markers come from a deprecated
 draft, and our kernel code for them has never worked.
 
 Setsockopt will now reject UDP_ENCAP_ESPINUDP_NON_IKE.
 
 Perhaps we should also add a check in key_handle_natt_info(), to make
 sure we also reject UDP_ENCAP_ESPINUDP_NON_IKE in the SADB.
 
 
 To generate a diff of this commit:
 cvs rdiff -u -r1.14 -r1.15 src/share/man/man4/udp.4
 cvs rdiff -u -r1.65 -r1.66 src/sys/netinet/in_pcb.h
 cvs rdiff -u -r1.252 -r1.253 src/sys/netinet/udp_usrreq.c
 cvs rdiff -u -r1.78 -r1.79 src/sys/netipsec/ipsec_output.c
 cvs rdiff -u -r1.9 -r1.10 src/sys/netipsec/ipsecif.c
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.