X-Git-Url: https://gerrit.fd.io/r/gitweb?a=blobdiff_plain;f=src%2Fvnet%2Fipsec%2Fah_decrypt.c;h=b128dfaf26bdb4edf06db03020d258985c5a7866;hb=b966e8bfdd3c63e2436ab6e5d250c8b1bf4dd102;hp=2488fa918f676798ae537f505dad1f39bdb9a529;hpb=c372dc2190f2376f9b816f71120354fd53732fa7;p=vpp.git diff --git a/src/vnet/ipsec/ah_decrypt.c b/src/vnet/ipsec/ah_decrypt.c index 2488fa918f6..b128dfaf26b 100644 --- a/src/vnet/ipsec/ah_decrypt.c +++ b/src/vnet/ipsec/ah_decrypt.c @@ -172,7 +172,7 @@ ah_decrypt_inline (vlib_main_t * vm, (&ipsec_sa_counters, thread_index, sa_index0, 1, i_b0->current_length); - icv_size = im->integ_algs[sa0->integ_alg].trunc_size; + icv_size = sa0->integ_trunc_size; if (PREDICT_TRUE (sa0->integ_alg != IPSEC_INTEG_ALG_NONE)) { u8 sig[64]; @@ -203,9 +203,7 @@ ah_decrypt_inline (vlib_main_t * vm, icv_padding_len = ah_calc_icv_padding_len (icv_size, 0 /* is_ipv6 */ ); } - hmac_calc (vm, sa0->integ_alg, sa0->integ_key.data, - sa0->integ_key.len, (u8 *) ih4, i_b0->current_length, - sig, sa0->use_esn, sa0->seq_hi); + hmac_calc (vm, sa0, (u8 *) ih4, i_b0->current_length, sig); if (PREDICT_FALSE (memcmp (digest, sig, icv_size))) {