ipsec: Add/Del SA not MP safe 00/26800/2
authorNeale Ranns <nranns@cisco.com>
Thu, 30 Apr 2020 13:30:57 +0000 (13:30 +0000)
committerDave Wallace <dwallacelf@gmail.com>
Thu, 7 May 2020 01:00:15 +0000 (01:00 +0000)
commit08f8d3dfeaddb16980c77281586caaf476723dfb
tree12b288bad1f191644c0d787c56abb829bdf70d7d
parent9b5d0b7108451d7c81bad113503d00f46b3bb1ea
ipsec: Add/Del SA not MP safe

Type: fix

some crytto engines store key data indexed by SA index. Creating new SAs
means this store reallocs with packets inflight; bad stuff ensues.

Signed-off-by: Neale Ranns <nranns@cisco.com>
Change-Id: Ia23c3a59e2d05fb006bdbd9922d01ee192e22853
src/vnet/ipsec/ipsec_api.c