svn commit: r239776 - stable/9/sys/netinet6

[Bjoern A. Zeeb]

Author: bz
Date: Tue Aug 28 12:56:23 2012
New Revision: 239776
URL: http://svn.freebsd.org/changeset/base/239776

Log:
  MFC r238877:
  
    Fix a comment that we do not have an SA yet but need to acquire one.

Modified:
  stable/9/sys/netinet6/ip6_ipsec.c
Directory Properties:
  stable/9/sys/   (props changed)

Modified: stable/9/sys/netinet6/ip6_ipsec.c
==============================================================================
--- stable/9/sys/netinet6/ip6_ipsec.c	Tue Aug 28 12:33:54 2012	(r239775)
+++ stable/9/sys/netinet6/ip6_ipsec.c	Tue Aug 28 12:56:23 2012	(r239776)
@@ -263,7 +263,7 @@ ip6_ipsec_output(struct mbuf **m, struct
 			    mtag->m_tag_id != PACKET_TAG_IPSEC_OUT_CRYPTO_NEEDED)
 				continue;
 			/*
-			 * Check if policy has an SA associated with it.
+			 * Check if policy has no SA associated with it.
 			 * This can happen when an SP has yet to acquire
 			 * an SA; e.g. on first reference.  If it occurs,
 			 * then we let ipsec4_process_packet do its thing.