> > > > Also, attempting to list either of the new ipsecs[ap]/ directories
> > > > results in an instant panic, what looked like "page fault trap in
> > > > supervisor mode" or something similar before the machine rebooted.

	i have been testing this through before the commit, and committe
	because i have seen no panic so far.

> > NULL pointer deref. introduced in rev. 1.92.  See kernfs_lookup() then
> > you'll find kfs->kfs_kt is NULL for some kind of node.
> 
> It's not in the lookup code.  ls -l makes it panic, plain ls doesn't,
> so it's in getattr. 
> 
> It's not new in 1.92, it's there in 1.91.
> 
> It's only in the ipsecsp dir, I was mistaken. ipsecsa dir is fine.
> 
> The code in Pipsecsp case of readdir is finding bogus SPD entries, it seems:
> 
> dan@tv [19:21][304]/kern# ls ipsecsp
> 16384 16385 16386 16387
> dan@tv [19:23][305]/kern# setkey -DP
> No SPD entries.
> 
> Interesting numbers :)

	they are not bogus.  there are policies associated with sockets,
	as well as the default fallback policy in the system.  they are not
	listed with setkey -DP, but is present in the system.

itojun