summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAlexander Bluhm <bluhm@cvs.openbsd.org>2023-11-30 10:21:57 +0000
committerAlexander Bluhm <bluhm@cvs.openbsd.org>2023-11-30 10:21:57 +0000
commita85ba33a482f1a08d2b2bf171410618b9aae77c3 (patch)
treefa6c7aa9faa9951ca99af35fb69f188156303f1e
parent8c3d182ae5e47eaa42f501883ead08f71fb1dc6c (diff)
Pass inp_seclevel to ip6_output() in TCP syn cache.
TCP syn_cache_respond() uses inp_seclevel from listening socket as ip_output() parameter. This was missing for ip6_output(). OK mvs@
-rw-r--r--sys/netinet/tcp_input.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/netinet/tcp_input.c b/sys/netinet/tcp_input.c
index 0354ece8be2..349cadfede7 100644
--- a/sys/netinet/tcp_input.c
+++ b/sys/netinet/tcp_input.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: tcp_input.c,v 1.395 2023/11/29 19:19:25 bluhm Exp $ */
+/* $OpenBSD: tcp_input.c,v 1.396 2023/11/30 10:21:56 bluhm Exp $ */
/* $NetBSD: tcp_input.c,v 1.23 1996/02/13 23:43:44 christos Exp $ */
/*
@@ -4175,7 +4175,7 @@ syn_cache_respond(struct syn_cache *sc, struct mbuf *m, uint64_t now)
/* leave flowlabel = 0, it is legal and require no state mgmt */
error = ip6_output(m, NULL /*XXX*/, &sc->sc_route6, 0,
- NULL, NULL);
+ NULL, inp ? inp->inp_seclevel : NULL);
break;
#endif
}