ipsec_strerror

n netinet6/ipsec.h

declares

which is used to pass an error code from the IPsec policy manipulation library to a program. can be used to obtain the error message string for the error code.

The array pointed to is not to be modified by the calling program. Since uses strerror(3) as underlying function, calling strerror(3) after will make the return value from invalid or overwritten.

always returns a pointer to a C string. The C string must not be overwritten by the calling program.

ipsec_set_policy(3)

first appeared in the WIDE/KAME IPv6 protocol stack kit.

will return its result which may be overwritten by subsequent calls.

is not thread safe.