>why not?
>a big structure, secasindex is allocated on stack in ipsec4_output
>and it isn't necessary after calling key_checkrequest.
>so maximum usage of stack can be reduced by separation.
>(i'm assuming that esp4_output uses more stack than key_checkrequest.)
>actually, stack overflow i saw recently is almost gone
>with this patch and one for wd.c that i post to tech-kern.

	ok, i got your point.  let me import it to kame first, then to netbsd.
	please don't commit it.  i will.

itojun