summaryrefslogtreecommitdiff
path: root/sys/netinet/ipsec_output.c
diff options
context:
space:
mode:
authorMarkus Friedl <markus@cvs.openbsd.org>2013-08-03 12:45:42 +0000
committerMarkus Friedl <markus@cvs.openbsd.org>2013-08-03 12:45:42 +0000
commit81b190dbaa32ea102b7db84dbd7e35c56e6d7217 (patch)
tree7f4443b9e5529d71eeadac6ccb17c00a21c0f28a /sys/netinet/ipsec_output.c
parent4200048407018a595237472da8944fa67423f588 (diff)
unbreak PMTU-discovery for AES-GCM; ok mikeb@
Diffstat (limited to 'sys/netinet/ipsec_output.c')
-rw-r--r--sys/netinet/ipsec_output.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/sys/netinet/ipsec_output.c b/sys/netinet/ipsec_output.c
index 153cdcb7be4..a95e8bcfb5d 100644
--- a/sys/netinet/ipsec_output.c
+++ b/sys/netinet/ipsec_output.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ipsec_output.c,v 1.48 2013/04/10 08:50:59 mpi Exp $ */
+/* $OpenBSD: ipsec_output.c,v 1.49 2013/08/03 12:45:41 markus Exp $ */
/*
* The author of this code is Angelos D. Keromytis (angelos@cis.upenn.edu)
*
@@ -549,7 +549,7 @@ ipsec_hdrsz(struct tdb *tdbp)
if (tdbp->tdb_authalgxform != NULL)
adjust += tdbp->tdb_authalgxform->authsize;
/* Padding */
- adjust += tdbp->tdb_encalgxform->blocksize;
+ adjust += MAX(4, tdbp->tdb_encalgxform->blocksize);
break;
case IPPROTO_AH: