diff options
| author |   Arthur de Kerhor <arthurdekerhor@gmail.com> | 2021-12-22 10:58:30 +0100 |
|---|---|---|
| committer |   Beno�t Ganne <bganne@cisco.com> | 2022-03-08 15:38:14 +0000 |
| commit | 1031098b903e6eb4bca4d268350795e6827abdda (patch) | |
| tree | aa9e0e2311521dca46b4a79d26a6ec4f1669f9cc /src/vnet/ipsec/ipsec_input.c | |
| parent | c711bd08c89c406f7040e28196390efcc01596cd (diff) | |
ip: set fib_index before exiting input ACL node
While setting an ACL, a user can specify the adjacency to follow after
the input ACL node. Thus, we may skip a lookup and enter directly a
local node (ex: ip4_local). To prevent the local source check from
failing, we need to specify the fib index. And, we have to do it just
before exiting the input ACL node because the l2_classify object
is overlapping with the fib_index in the vnet_buffer_opaque_t struct.
We could have added a padding to avoid this overlap but there is no
place for that in the structure.
Type: fix
Signed-off-by: Arthur de Kerhor <arthurdekerhor@gmail.com>
Change-Id: I383c36e4aec08d181f966f28565aefed950d2a74
Diffstat (limited to 'src/vnet/ipsec/ipsec_input.c')
0 files changed, 0 insertions, 0 deletions