From fe2d23f916d1991f4a1a8384eae41b5cceb80189 Mon Sep 17 00:00:00 2001 From: Neale Ranns Date: Fri, 18 Nov 2022 04:24:09 +0000 Subject: ipsec: Failure at the start of the batch should not invalidate the rest of the batch Type: fix Signed-off-by: Neale Ranns Change-Id: Icd1e43a5764496784c355c93066273435f16dd35 --- src/vnet/ipsec/esp_decrypt.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src/vnet') diff --git a/src/vnet/ipsec/esp_decrypt.c b/src/vnet/ipsec/esp_decrypt.c index f80b3794f2a..306fb7d2ce6 100644 --- a/src/vnet/ipsec/esp_decrypt.c +++ b/src/vnet/ipsec/esp_decrypt.c @@ -1189,7 +1189,7 @@ esp_decrypt_inline (vlib_main_t *vm, vlib_node_runtime_t *node, else esp_decrypt_prepare_sync_op ( vm, node, ptd, &crypto_ops, &integ_ops, op, sa0, payload, len, - cpd.icv_sz, cpd.iv_sz, pd, pd2, b[0], sync_next, b - bufs); + cpd.icv_sz, cpd.iv_sz, pd, pd2, b[0], sync_next, n_sync); /* next */ next: if (ESP_DECRYPT_ERROR_RX_PKTS != err) -- cgit 1.2.3-korg