[src/netbsd-1-5]: src/sys/netinet6 Pull up revision 1.28 (via patch, requeste...

[he <he%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/263656cb7ee0
branches:  netbsd-1-5
changeset: 490823:263656cb7ee0
user:      he <he%NetBSD.org@localhost>
date:      Sun Mar 11 21:12:19 2001 +0000

description:
Pull up revision 1.28 (via patch, requested by itojun):
  Ensure that we enforce inbound IPsec policy on all IP protocols,
  not just TCP, UDP and ICMP.

diffstat:

 sys/netinet6/in6_proto.c |  20 ++++++++++----------
 1 files changed, 10 insertions(+), 10 deletions(-)

diffs (69 lines):

diff -r f2d80ca9fe03 -r 263656cb7ee0 sys/netinet6/in6_proto.c
--- a/sys/netinet6/in6_proto.c  Sun Mar 11 21:11:58 2001 +0000
+++ b/sys/netinet6/in6_proto.c  Sun Mar 11 21:12:19 2001 +0000
@@ -1,5 +1,5 @@
-/*     $NetBSD: in6_proto.c,v 1.17.4.2 2000/10/17 21:40:26 tv Exp $    */
-/*     $KAME: in6_proto.c,v 1.64 2000/06/20 16:20:27 itojun Exp $      */
+/*     $NetBSD: in6_proto.c,v 1.17.4.3 2001/03/11 21:12:19 he Exp $    */
+/*     $KAME: in6_proto.c,v 1.66 2000/10/10 15:35:47 itojun Exp $      */
 
 /*
  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
@@ -152,7 +152,7 @@
   ip6_init,    0,              frag6_slowtimo, frag6_drain,
   ip6_sysctl,
 },
-{ SOCK_DGRAM,  &inet6domain,   IPPROTO_UDP,    PR_ATOMIC | PR_ADDR,
+{ SOCK_DGRAM,  &inet6domain,   IPPROTO_UDP,    PR_ATOMIC|PR_ADDR,
   udp6_input,  0,              udp6_ctlinput,  ip6_ctloutput,
   udp6_usrreq, udp6_init,
   0,           0,              0,
@@ -177,13 +177,13 @@
   tcp_sysctl,
 },
 #endif /*TCP6*/
-{ SOCK_RAW,    &inet6domain,   IPPROTO_RAW,    PR_ATOMIC | PR_ADDR,
+{ SOCK_RAW,    &inet6domain,   IPPROTO_RAW,    PR_ATOMIC|PR_ADDR,
   rip6_input,  rip6_output,    rip6_ctlinput,  rip6_ctloutput,
   rip6_usrreq,
   0,           0,              0,              0,
 },
-{ SOCK_RAW,    &inet6domain,   IPPROTO_ICMPV6, PR_ATOMIC | PR_ADDR,
-  icmp6_input, rip6_output,    0,              rip6_ctloutput,
+{ SOCK_RAW,    &inet6domain,   IPPROTO_ICMPV6, PR_ATOMIC|PR_ADDR|PR_LASTHDR,
+  icmp6_input, rip6_output,    rip6_ctlinput,  rip6_ctloutput,
   rip6_usrreq,
   icmp6_init,  icmp6_fasttimo, 0,              0,
   icmp6_sysctl,
@@ -226,13 +226,13 @@
 },
 #endif /* IPSEC */
 #ifdef INET
-{ SOCK_RAW,    &inet6domain,   IPPROTO_IPV4,   PR_ATOMIC|PR_ADDR,
+{ SOCK_RAW,    &inet6domain,   IPPROTO_IPV4,   PR_ATOMIC|PR_ADDR|PR_LASTHDR,
   encap6_input,        rip6_output,    0,              rip6_ctloutput,
   rip6_usrreq,
   0,           0,              0,              0,
 },
 #endif
-{ SOCK_RAW,    &inet6domain,   IPPROTO_IPV6,   PR_ATOMIC|PR_ADDR,
+{ SOCK_RAW,    &inet6domain,   IPPROTO_IPV6,   PR_ATOMIC|PR_ADDR|PR_LASTHDR,
   encap6_input, rip6_output,    0,             rip6_ctloutput,
   rip6_usrreq,
 #ifndef INET6
@@ -241,13 +241,13 @@
   encap_init,  0,              0,              0,
 #endif
 },
-{ SOCK_RAW,     &inet6domain,  IPPROTO_PIM,    PR_ATOMIC|PR_ADDR,
+{ SOCK_RAW,     &inet6domain,  IPPROTO_PIM,    PR_ATOMIC|PR_ADDR|PR_LASTHDR,
   pim6_input,    rip6_output,  0,              rip6_ctloutput, 
   rip6_usrreq,
   0,            0,              0,              0,
 },
 /* raw wildcard */
-{ SOCK_RAW,    &inet6domain,   0,              PR_ATOMIC | PR_ADDR,
+{ SOCK_RAW,    &inet6domain,   0,              PR_ATOMIC|PR_ADDR,
   rip6_input,  rip6_output,    0,              rip6_ctloutput,
   rip6_usrreq,
   rip6_init,   0,              0,              0,