ipsec: Add/Del SA not MP safe 99/26799/1
authorNeale Ranns <nranns@cisco.com>
Thu, 30 Apr 2020 13:30:57 +0000 (13:30 +0000)
committerAndrew Yourtchenko <ayourtch@gmail.com>
Thu, 30 Apr 2020 17:20:00 +0000 (17:20 +0000)
commit0830008b31104fd5833d8559afc95c6198f7b0e0
treeda725501ae7b58717622c5c9e96d81e898b074c6
parent8e4ed521a65a6fcf787a10e34d155e41a7df4f52
ipsec: Add/Del SA not MP safe

Type: fix

some crytto engines store key data indexed by SA index. Creating new SAs
means this store reallocs with packets inflight; bad stuff ensues.

Signed-off-by: Neale Ranns <nranns@cisco.com>
Change-Id: Ia23c3a59e2d05fb006bdbd9922d01ee192e22853
src/vnet/ipsec/ipsec_api.c