svn commit: r239778 - stable/7/sys/netinet6

[Bjoern A. Zeeb]

Author: bz
Date: Tue Aug 28 12:56:35 2012
New Revision: 239778
URL: http://svn.freebsd.org/changeset/base/239778

Log:
  MFC r238877:
  
    Fix a comment that we do not have an SA yet but need to acquire one.

Modified:
  stable/7/sys/netinet6/ip6_ipsec.c
Directory Properties:
  stable/7/sys/   (props changed)

Modified: stable/7/sys/netinet6/ip6_ipsec.c
==============================================================================
--- stable/7/sys/netinet6/ip6_ipsec.c	Tue Aug 28 12:56:28 2012	(r239777)
+++ stable/7/sys/netinet6/ip6_ipsec.c	Tue Aug 28 12:56:35 2012	(r239778)
@@ -239,7 +239,7 @@ ip6_ipsec_output(struct mbuf **m, struct
 			    mtag->m_tag_id != PACKET_TAG_IPSEC_OUT_CRYPTO_NEEDED)
 				continue;
 			/*
-			 * Check if policy has an SA associated with it.
+			 * Check if policy has no SA associated with it.
 			 * This can happen when an SP has yet to acquire
 			 * an SA; e.g. on first reference.  If it occurs,
 			 * then we let ipsec4_process_packet do its thing.