From 282872127bbeee6ae59ab3f885c09bad601ee0cc Mon Sep 17 00:00:00 2001 From: Neale Ranns Date: Mon, 16 Dec 2019 00:53:11 +0000 Subject: ipsec: IPSec protection for multi-point tunnel interfaces Type: feature Signed-off-by: Neale Ranns Change-Id: Iaba2ab11bfaa1c8db4023434e3043ac39500f938 --- src/vnet/ipsec/esp_encrypt.c | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) (limited to 'src/vnet/ipsec/esp_encrypt.c') diff --git a/src/vnet/ipsec/esp_encrypt.c b/src/vnet/ipsec/esp_encrypt.c index 2c4da5dafa8..7df537a5555 100644 --- a/src/vnet/ipsec/esp_encrypt.c +++ b/src/vnet/ipsec/esp_encrypt.c @@ -23,6 +23,7 @@ #include #include +#include #include #define foreach_esp_encrypt_next \ @@ -319,13 +320,13 @@ esp_encrypt_inline (vlib_main_t * vm, vlib_node_runtime_t * node, if (is_tun) { /* we are on a ipsec tunnel's feature arc */ - u32 next0; + u32 next0 = 0; config_index = b[0]->current_config_index; - sa_index0 = *(u32 *) vnet_feature_next_with_data (&next0, b[0], - sizeof - (sa_index0)); - vnet_buffer (b[0])->ipsec.sad_index = sa_index0; + vnet_feature_next (&next0, b[0]); next[0] = next0; + vnet_buffer (b[0])->ipsec.sad_index = + sa_index0 = ipsec_tun_protect_get_sa_out + (vnet_buffer (b[0])->ip.adj_index[VLIB_TX]); } else sa_index0 = vnet_buffer (b[0])->ipsec.sad_index; -- cgit 1.2.3-korg