CVSROOT: /cvs Module name: src Changes by: m...@cvs.openbsd.org 2017/05/29 08:36:22
Modified files: sys/netinet : in.c in_var.h ip_input.c ip_output.c sys/netinet6 : ip6_input.c Log message: Per-interface list of addresses, both multicast and unicast, are currently protected by the NET_LOCK(). They are not accessed in the hot path, so protecting them with a mutex could be an option. However since we're now going to run with a NET_LOCK() for some time, assert that it is held. IPsec is not yet ready to run without KERNEL_LOCK(), so assert it is held, even in the forwarding path. Tested by sthen@, ok visa@, claudio@, bluhm@