A branch is available on github to ease merge: https://github.com/stormshield-acazuc/freebsd-src/tree/bnxt_media

A branch on github is available here to ease merge: https://github.com/stormshield-acazuc/freebsd-src/tree/bnxt_csum

diff context

I commited the change on github here: https://github.com/stormshield-acazuc/freebsd-src/commit/b2e39427211c2645b567d0039ce74636d449d6fa
I can create a pull request if it's easier for you to merge

As proposed by @glebius, ip_fillid now does always take a boolean to enable random id
The boolean is V_ip_random_id for all the calls to the function, except for ipsec_output where it's V_ip4_ipsec_random_id
ipsec(4) has been modified as well to document the ipsec sysctl

In D49126#1120569, @mhorne wrote:

Can you confirm the git author field?

Aurelian Cazuc <aurelien.cazuc.external@stormshield.eu>

Fixed buffer overflow

Check for maximum padding size in m_pad

Using mbuf cluster in m_pad for long padding

Padding is now done per block of MHLEN bytes to avoid buffer overflow due to m_pad allocating at most 1 mbuf

Remarks from ae

Would you prefer commit it yourself or let fabient commit it ?
If you commit it yourself, please mention Stormshield as sponsor.

Remarks from ae