diff options
| author |   Benoît Ganne <bganne@cisco.com> | 2021-01-22 18:11:37 +0100 |
|---|---|---|
| committer |   Fan Zhang <roy.fan.zhang@intel.com> | 2021-04-07 11:44:48 +0000 |
| commit | 48524a9072c1c7cda964f8777d3a08a1aa63c533 (patch) | |
| tree | ca7d24b87ecf14103d4699065a8a6623b40f4961 /src/vnet/ipsec | |
| parent | 3887be7d375dc7bd564cea0881a9fb7a31f06456 (diff) | |
crypto: fix ops flags in crypto sw scheduler
The crypto op flags must be reset to frame flags minus invalid values
depending of the operation, instead of forcing them to specific values.
Type: fix
Change-Id: Ib02c2a738bbca6962394b3c03088d516d0da56a0
Signed-off-by: Benoît Ganne <bganne@cisco.com>
Diffstat (limited to 'src/vnet/ipsec')
| -rw-r--r-- | src/vnet/ipsec/esp_decrypt.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/vnet/ipsec/esp_decrypt.c b/src/vnet/ipsec/esp_decrypt.c index ea5a99c6fa1..8c4a9e22182 100644 --- a/src/vnet/ipsec/esp_decrypt.c +++ b/src/vnet/ipsec/esp_decrypt.c @@ -632,6 +632,8 @@ esp_decrypt_prepare_async_frame (vlib_main_t *vm, vlib_node_runtime_t *node, key_index = sa0->linked_key_index; integ_start_offset = payload - b->data; integ_len = len; + if (PREDICT_TRUE (sa0->integ_op_id != VNET_CRYPTO_OP_NONE)) + flags |= VNET_CRYPTO_OP_FLAG_HMAC_CHECK; if (pd->is_chain) { |