CVSROOT:        /cvs
Module name:    src
Changes by:     m...@cvs.openbsd.org    2017/05/29 08:36:22

Modified files:
        sys/netinet    : in.c in_var.h ip_input.c ip_output.c 
        sys/netinet6   : ip6_input.c 

Log message:
Per-interface list of addresses, both multicast and unicast, are
currently protected by the NET_LOCK().

They are not accessed in the hot path, so protecting them with a
mutex could be an option.  However since we're now going to run
with a NET_LOCK() for some time, assert that it is held.

IPsec is not yet ready to run without KERNEL_LOCK(), so assert it
is held, even in the forwarding path.

Tested by sthen@, ok visa@, claudio@, bluhm@

Reply via email to