From 8f63c2ebe655e7cd27236f2327d2e9082f782f9b Mon Sep 17 00:00:00 2001 From: Neale Ranns Date: Sat, 13 Apr 2019 15:30:21 +0000 Subject: IPSEC: crypto overflow decrypting too many bytes. Change-Id: I4663e70271d9734eda7f9a127967b9224c0e5efc Signed-off-by: Neale Ranns (cherry picked from commit 0a0c7eef787dbf29c8b018420cb9d244cbe8d2dd) --- src/vnet/ipsec/esp_decrypt.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/vnet/ipsec/esp_decrypt.c b/src/vnet/ipsec/esp_decrypt.c index fc4a99a873d..759b1d9651c 100644 --- a/src/vnet/ipsec/esp_decrypt.c +++ b/src/vnet/ipsec/esp_decrypt.c @@ -234,7 +234,7 @@ esp_decrypt_inline (vlib_main_t * vm, op->key = sa0->crypto_key.data; op->iv = payload; op->src = op->dst = payload += cpd.iv_sz; - op->len = len; + op->len = len - cpd.iv_sz; op->user_data = b - bufs; } -- cgit 1.2.3-korg