summaryrefslogtreecommitdiffstats
path: root/src/vnet/mfib
diff options
context:
space:
mode:
authorMatthew G Smith <mgsmith@netgate.com>2019-05-22 13:34:08 -0500
committerDamjan Marion <dmarion@me.com>2019-05-30 08:41:20 +0000
commit2a2e5938a3a019f94b4acf53191bf4a42d72c68a (patch)
tree1166583492cd5a43aa664596f7123798e32e50d8 /src/vnet/mfib
parent734d430f37251bc7e71d507983ee640ae1625fbe (diff)
IPsec: modify post-decrypt buf len calculation
For tunnel mode, after decryption the buffer length was being adjusted by adding (iv length + esp header size). Subtract it instead. Required for BFD to work on an IPsec tunnel interface. BFD verifies that the amount of received data is the expected size. It drops the packet if the buffer metadata says that the packet buffer contains more data than the packet headers say it should. Change-Id: I3146d5c3cbf1cceccc9989eefbc9a59e604e9975 Signed-off-by: Matthew Smith <mgsmith@netgate.com>
Diffstat (limited to 'src/vnet/mfib')
0 files changed, 0 insertions, 0 deletions