diff options
author | Frédéric Perrin <fred@fperrin.net> | 2023-07-14 11:13:42 +0100 |
---|---|---|
committer | Fan Zhang <fanzhang.oss@gmail.com> | 2023-09-07 08:07:51 +0000 |
commit | a4157aec1c7718226f0d4cee51c7a3feb57e6fc4 (patch) | |
tree | 3b8fb26098c99266c41ef5f32c58c757c2d5029b /src/vnet/ipsec/esp_decrypt.c | |
parent | c143cc8967c9e0471e0cb85bf847c6634deeda25 (diff) |
ipsec: clear L4-cksum flags when decap'ing packets
Type: fix
Signed-off-by: Frédéric Perrin <fred@fperrin.net>
Change-Id: I45191b7316c88038bcd57d62aeb07bb109cf4a4d
Diffstat (limited to 'src/vnet/ipsec/esp_decrypt.c')
-rw-r--r-- | src/vnet/ipsec/esp_decrypt.c | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/vnet/ipsec/esp_decrypt.c b/src/vnet/ipsec/esp_decrypt.c index 2c1efa2f4be..74410a8add1 100644 --- a/src/vnet/ipsec/esp_decrypt.c +++ b/src/vnet/ipsec/esp_decrypt.c @@ -840,7 +840,9 @@ esp_decrypt_post_crypto (vlib_main_t *vm, vlib_node_runtime_t *node, u16 adv = pd->iv_sz + esp_sz; u16 tail = sizeof (esp_footer_t) + pad_length + icv_sz; u16 tail_orig = sizeof (esp_footer_t) + pad_length + pd->icv_sz; - b->flags &= ~VLIB_BUFFER_TOTAL_LENGTH_VALID; + b->flags &= + ~(VLIB_BUFFER_TOTAL_LENGTH_VALID | VNET_BUFFER_F_L4_CHECKSUM_COMPUTED | + VNET_BUFFER_F_L4_CHECKSUM_CORRECT); if ((pd->flags & tun_flags) == 0 && !is_tun) /* transport mode */ { |