From: Masahide NAKAMURA <[EMAIL PROTECTED]> Date: Sat, 29 Jul 2006 18:30:40 +0900
> static inline int xfrm_id_proto_match(u8 proto, u8 userproto) > { > +#ifdef CONFIG_XFRM_ADVANCED > + return (!userproto || proto == userproto || > + (userproto == IPSEC_PROTO_ANY && (proto == IPPROTO_AH || > + proto == IPPROTO_ESP || > + proto == IPPROTO_COMP))); > +#else > return (userproto == IPSEC_PROTO_ANY || proto == userproto); > +#endif > } Now it makes sense. All the previous patches were hard to understand without this logic being seen first. It is another argument for removing XFRM_ADVANCED config option. - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html