8560 Reference leak on ipsec_action_t
Reviewed by: Norm Jacobs <naj@snapcon.com>
Reviewed by: Andy Fiddaman <omnios@citrus-it.net>

*** 21,31 ****
  /*
   * Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
   * Use is subject to license terms.
   * Copyright (c) 2012 Nexenta Systems, Inc. All rights reserved.
   * Copyright (c) 2016 by Delphix. All rights reserved.
!  * Copyright (c) 2017, Joyent, Inc.
   */
  
  /*
   * IPsec Security Policy Database.
   *
--- 21,31 ----
  /*
   * Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
   * Use is subject to license terms.
   * Copyright (c) 2012 Nexenta Systems, Inc. All rights reserved.
   * Copyright (c) 2016 by Delphix. All rights reserved.
!  * Copyright (c) 2018, Joyent, Inc.
   */
  
  /*
   * IPsec Security Policy Database.
   *
*** 4121,4130 ****
--- 4121,4135 ----
          }
          if (ira->ira_ipsec_esp_sa != NULL) {
                  IPSA_REFRELE(ira->ira_ipsec_esp_sa);
                  ira->ira_ipsec_esp_sa = NULL;
          }
+         if (ira->ira_ipsec_action != NULL) {
+                 IPACT_REFRELE(ira->ira_ipsec_action);
+                 ira->ira_ipsec_action = NULL;
+         }
+ 
          ira->ira_flags &= ~IRAF_IPSEC_SECURE;
  }
  
  /*
   * This is called from ire_send_local when a packet