From 0c1454c1f3abfdbcf9ceb9cdbd4e3596a94d6a0f Mon Sep 17 00:00:00 2001 From: Xiaoming Jiang Date: Fri, 5 May 2023 02:28:20 +0000 Subject: ipsec: fix ipsec_set_next_index set with wrong sa index when async frame commit failed Type: fix Signed-off-by: Xiaoming Jiang Change-Id: Ib4c61906a9cbb3eea1214394d164ecffb38fd36d --- src/vnet/ipsec/esp_decrypt.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/vnet/ipsec/esp_decrypt.c') diff --git a/src/vnet/ipsec/esp_decrypt.c b/src/vnet/ipsec/esp_decrypt.c index 827d168f98a..6db1fe305c8 100644 --- a/src/vnet/ipsec/esp_decrypt.c +++ b/src/vnet/ipsec/esp_decrypt.c @@ -1246,7 +1246,7 @@ esp_decrypt_inline (vlib_main_t *vm, vlib_node_runtime_t *node, n_noop += esp_async_recycle_failed_submit ( vm, *async_frame, node, ESP_DECRYPT_ERROR_CRYPTO_ENGINE_ERROR, IPSEC_SA_ERROR_CRYPTO_ENGINE_ERROR, n_noop, noop_bi, noop_nexts, - ESP_DECRYPT_NEXT_DROP); + ESP_DECRYPT_NEXT_DROP, false); vnet_crypto_async_reset_frame (*async_frame); vnet_crypto_async_free_frame (vm, *async_frame); } -- cgit 1.2.3-korg