diff options
| author |   PiotrX Kleski <piotrx.kleski@intel.com> | 2020-05-05 14:14:22 +0200 |
|---|---|---|
| committer |   Neale Ranns <nranns@cisco.com> | 2020-05-24 07:31:49 +0000 |
| commit | fdca4dd1a1a817e65bf44e435261d893fc0c51d6 (patch) | |
| tree | 4f2c012bb3be8360cbf7c59d5bda3bd3451c233c /src/vnet/ip-neighbor | |
| parent | cbe053e14f2852b42e4e3218af8756a6d7e730c8 (diff) | |
ipsec: fixed chaining ops after add footer and icv
In case there is no free space in first buffer for ICV and footer,
additional buffer will be added, but esp_encrypt will stay in single
buffer mode.
The issue happens for the following payload sizes:
- TCP packets with payload 1992
- ICMP packets with payload 2004
This fix moves the single/chained buffer ops selection to after
esp_add_footer_and_icv call.
Type: fix
Signed-off-by: Fan Zhang <roy.fan.zhang@intel.com>
Signed-off-by: PiotrX Kleski <piotrx.kleski@intel.com>
Change-Id: Ic5ceba418f738933f96edb3e489ca2d149033b79
Diffstat (limited to 'src/vnet/ip-neighbor')
0 files changed, 0 insertions, 0 deletions