Code Review / vpp.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: d74cb99) | patch
ipsec: ipsec-input: check for too-short packets 46/23446/2
authorBenoît Ganne <bganne@cisco.com>
Fri, 25 Oct 2019 13:26:27 +0000 (15:26 +0200)
committerAndrew Yourtchenko <ayourtch@gmail.com>
Mon, 18 Nov 2019 13:17:12 +0000 (13:17 +0000)
commit22dec9695162a0af2a4709762cdc767f08819895
tree7afbd8bdc4094c6704ade19d411439bfc459c895tree | snapshot
parentd74cb99a98ded19ae851ee4e0858ccd3d1543c8fcommit | diff
ipsec: ipsec-input: check for too-short packets

Make sure packet is big enough before processing it.
Policy matching is done speculatively but is discarded if packet is too
short.

Type: fix

Change-Id: I647db2c4e568b0d9bf2cfd5056e1b1c2e25132fe
Signed-off-by: Benoît Ganne <bganne@cisco.com>
(cherry picked from commit f7f49640bbb4339d71f8b713b04b8f401d5fc270)
src/vnet/ipsec/ipsec_input.c diff | blob | history
Vector Packet Processing