FreeBSD/sys/netipsec/key.c
/*
 * XXX: maybe This function is called after INBOUND IPsec processing.
 *
 * Special check for tunnel-mode packets.
 * We must make some checks for consistency between inner and outer IP header.
 *
 * xxx more checks to be provided
 */
maybe This function is called after INBOUND IPsec processing.
Special check for tunnel-mode packets.
We must make some checks for consistency between inner and outer IP header.

xxx more checks to be provided
maybe This function is called after INBOUND IPsec processing . Special check for tunnel - mode packets . We must make some checks for consistency between inner and outer IP header . xxx more checks to be provided
int
key_checktunnelsanity(struct secasvar *sav, u_int family, caddr_t src,
    caddr_t dst)
{
	IPSEC_ASSERT(sav->sah != NULL, ("null SA header"));
	return 1;
}
int key_checktunnelsanity ( struct secasvar * sav , u_int family , caddr_t src , caddr_t dst ) { IPSEC_ASSERT ( sav -> sah != NULL , ( " " ) ) ; return 1 ; }
XXX: maybe This function is called after INBOUND IPsec processing.
XXX : maybe This function is called after INBOUND IPsec processing .
/* XXX: check inner IP header */