summaryrefslogtreecommitdiffstats
path: root/src/vnet/ipsec/ah_decrypt.c
diff options
context:
space:
mode:
authorFrédéric Perrin <fred@fperrin.net>2023-07-14 11:13:42 +0100
committerFan Zhang <fanzhang.oss@gmail.com>2023-09-07 08:07:51 +0000
commita4157aec1c7718226f0d4cee51c7a3feb57e6fc4 (patch)
tree3b8fb26098c99266c41ef5f32c58c757c2d5029b /src/vnet/ipsec/ah_decrypt.c
parentc143cc8967c9e0471e0cb85bf847c6634deeda25 (diff)
ipsec: clear L4-cksum flags when decap'ing packets
Type: fix Signed-off-by: Frédéric Perrin <fred@fperrin.net> Change-Id: I45191b7316c88038bcd57d62aeb07bb109cf4a4d
Diffstat (limited to 'src/vnet/ipsec/ah_decrypt.c')
-rw-r--r--src/vnet/ipsec/ah_decrypt.c2
1 files changed, 2 insertions, 0 deletions
diff --git a/src/vnet/ipsec/ah_decrypt.c b/src/vnet/ipsec/ah_decrypt.c
index f20f620eb3c..5f98693204a 100644
--- a/src/vnet/ipsec/ah_decrypt.c
+++ b/src/vnet/ipsec/ah_decrypt.c
@@ -325,6 +325,8 @@ ah_decrypt_inline (vlib_main_t * vm,
+ pd->icv_padding_len;
vlib_buffer_advance (b[0], pd->ip_hdr_size + ah_hdr_len);
b[0]->flags |= VLIB_BUFFER_TOTAL_LENGTH_VALID;
+ b[0]->flags &= ~(VNET_BUFFER_F_L4_CHECKSUM_COMPUTED |
+ VNET_BUFFER_F_L4_CHECKSUM_CORRECT);
if (PREDICT_TRUE (ipsec_sa_is_set_IS_TUNNEL (sa0)))
{ /* tunnel mode */