[src/trunk]: src/sys/netinet6 Fix usages of ipsec_used

[ozaki-r <ozaki-r%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/922c6757b8c7
branches:  trunk
changeset: 827609:922c6757b8c7
user:      ozaki-r <ozaki-r%NetBSD.org@localhost>
date:      Sun Nov 05 07:03:37 2017 +0000

description:
Fix usages of ipsec_used

If IPsec isn't used, we must go back to the normal path.

PR kern/52659

diffstat:

 sys/netinet6/icmp6.c   |  7 ++++---
 sys/netinet6/raw_ip6.c |  7 ++++---
 2 files changed, 8 insertions(+), 6 deletions(-)

diffs (56 lines):

diff -r e052eb4edb11 -r 922c6757b8c7 sys/netinet6/icmp6.c
--- a/sys/netinet6/icmp6.c      Sun Nov 05 02:36:00 2017 +0000
+++ b/sys/netinet6/icmp6.c      Sun Nov 05 07:03:37 2017 +0000
@@ -1,4 +1,4 @@
-/*     $NetBSD: icmp6.c,v 1.213 2017/08/02 02:18:17 ozaki-r Exp $      */
+/*     $NetBSD: icmp6.c,v 1.214 2017/11/05 07:03:37 ozaki-r Exp $      */
 /*     $KAME: icmp6.c,v 1.217 2001/06/20 15:03:29 jinmei Exp $ */
 
 /*
@@ -62,7 +62,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: icmp6.c,v 1.213 2017/08/02 02:18:17 ozaki-r Exp $");
+__KERNEL_RCSID(0, "$NetBSD: icmp6.c,v 1.214 2017/11/05 07:03:37 ozaki-r Exp $");
 
 #ifdef _KERNEL_OPT
 #include "opt_inet.h"
@@ -2012,7 +2012,8 @@
                        /*
                         * Check AH/ESP integrity
                         */
-                       if (ipsec_used && !ipsec6_in_reject(m, last))
+                       if (!ipsec_used ||
+                           (ipsec_used && !ipsec6_in_reject(m, last)))
 #endif /* IPSEC */
                        if ((n = m_copy(m, 0, (int)M_COPYALL)) != NULL) {
                                if (last->in6p_flags & IN6P_CONTROLOPTS)
diff -r e052eb4edb11 -r 922c6757b8c7 sys/netinet6/raw_ip6.c
--- a/sys/netinet6/raw_ip6.c    Sun Nov 05 02:36:00 2017 +0000
+++ b/sys/netinet6/raw_ip6.c    Sun Nov 05 07:03:37 2017 +0000
@@ -1,4 +1,4 @@
-/*     $NetBSD: raw_ip6.c,v 1.157 2017/06/01 02:45:14 chs Exp $        */
+/*     $NetBSD: raw_ip6.c,v 1.158 2017/11/05 07:03:37 ozaki-r Exp $    */
 /*     $KAME: raw_ip6.c,v 1.82 2001/07/23 18:57:56 jinmei Exp $        */
 
 /*
@@ -62,7 +62,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: raw_ip6.c,v 1.157 2017/06/01 02:45:14 chs Exp $");
+__KERNEL_RCSID(0, "$NetBSD: raw_ip6.c,v 1.158 2017/11/05 07:03:37 ozaki-r Exp $");
 
 #ifdef _KERNEL_OPT
 #include "opt_ipsec.h"
@@ -205,7 +205,8 @@
                        /*
                         * Check AH/ESP integrity
                         */
-                       if (ipsec_used && !ipsec6_in_reject(m, last)) 
+                       if (!ipsec_used ||
+                           (ipsec_used && !ipsec6_in_reject(m, last)))
 #endif /* IPSEC */
                        if ((n = m_copy(m, 0, (int)M_COPYALL)) != NULL) {
                                if (last->in6p_flags & IN6P_CONTROLOPTS)