aboutsummaryrefslogtreecommitdiff
path: root/sys/netinet/udp_usrreq.c
diff options
context:
space:
mode:
authorAndrey V. Elsukov <ae@FreeBSD.org>2014-12-11 19:20:13 +0000
committerAndrey V. Elsukov <ae@FreeBSD.org>2014-12-11 19:20:13 +0000
commit44eb8bbe7b7462c537ebe8aa05c20c7c9093098b (patch)
tree034f0f6c79379e9c31a2b9b39c6d598ff9853e39 /sys/netinet/udp_usrreq.c
parent49ada98eac0b9704ab5b6f557c40124e3b2360f3 (diff)
downloadsrc-44eb8bbe7b7462c537ebe8aa05c20c7c9093098b.tar.gz
src-44eb8bbe7b7462c537ebe8aa05c20c7c9093098b.zip
Do not count security policy violation twice.
ipsec*_in_reject() do this by their own. Obtained from: Yandex LLC Sponsored by: Yandex LLC
Notes
Notes: svn path=/head/; revision=275716
Diffstat (limited to 'sys/netinet/udp_usrreq.c')
-rw-r--r--sys/netinet/udp_usrreq.c1
1 files changed, 0 insertions, 1 deletions
diff --git a/sys/netinet/udp_usrreq.c b/sys/netinet/udp_usrreq.c
index f392665d20c0..482ee1510385 100644
--- a/sys/netinet/udp_usrreq.c
+++ b/sys/netinet/udp_usrreq.c
@@ -323,7 +323,6 @@ udp_append(struct inpcb *inp, struct ip *ip, struct mbuf *n, int off,
/* Check AH/ESP integrity. */
if (ipsec4_in_reject(n, inp)) {
m_freem(n);
- IPSECSTAT_INC(ips_in_polvio);
return;
}
#ifdef IPSEC_NAT_T