8560 Reference leak on ipsec_action_t
Reviewed by: Norm Jacobs <naj@snapcon.com>
Reviewed by: Andy Fiddaman <omnios@citrus-it.net>

@@ -21,11 +21,11 @@
 /*
  * Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
  * Use is subject to license terms.
  * Copyright (c) 2012 Nexenta Systems, Inc. All rights reserved.
  * Copyright (c) 2016 by Delphix. All rights reserved.
- * Copyright (c) 2017, Joyent, Inc.
+ * Copyright (c) 2018, Joyent, Inc.
  */
 
 /*
  * IPsec Security Policy Database.
  *

@@ -4121,10 +4121,15 @@
         }
         if (ira->ira_ipsec_esp_sa != NULL) {
                 IPSA_REFRELE(ira->ira_ipsec_esp_sa);
                 ira->ira_ipsec_esp_sa = NULL;
         }
+        if (ira->ira_ipsec_action != NULL) {
+                IPACT_REFRELE(ira->ira_ipsec_action);
+                ira->ira_ipsec_action = NULL;
+        }
+
         ira->ira_flags &= ~IRAF_IPSEC_SECURE;
 }
 
 /*
  * This is called from ire_send_local when a packet