ipsec: fix esp trace seq number overflow 98/23198/2
authorBenoît Ganne <bganne@cisco.com>
Tue, 29 Oct 2019 10:13:05 +0000 (11:13 +0100)
committerAndrew Yourtchenko <ayourtch@gmail.com>
Tue, 5 Nov 2019 10:44:44 +0000 (10:44 +0000)
commite7ac6d0250664f278e7aa5a483f413bda0432def
tree3824999c0a5f64f24b38508263cff34711e05699
parente04a58d27bac8f97bda85a7684b7bb68682341cc
ipsec: fix esp trace seq number overflow

Do not copy invalid seq number if packet is too small.

Type: fix

Change-Id: I1e78f5920e9645521f57efccaf35bbf9ce0676a8
Signed-off-by: Benoît Ganne <bganne@cisco.com>
(cherry picked from commit c520fe7ab9db6fa60f9e69be990dd5c83eb40522)
src/vnet/ipsec/ipsec_if_in.c
src/vnet/ipsec/ipsec_tun_in.c