From: Marco Varlese <marco.varlese@suse.com>
Date: Fri, 23 Mar 2018 12:32:50 +0000 (+0100)
Subject: IPSEC_AH: broken initialization (VPP-1208)
X-Git-Tag: v18.04-rc1~66
X-Git-Url: https://gerrit.fd.io/r/gitweb?a=commitdiff_plain;h=refs%2Fchanges%2F35%2F11335%2F4;p=vpp.git

IPSEC_AH: broken initialization (VPP-1208)

The init-path for IPSEC_AH where the CTX gets initialized is broken
since the for-loop never executes due to the wrong usage of
tm->n_vlib_mains which being subtracted by 1.

Change-Id: I4d967f52cd3ca061aa60d824d65f446e06162403
Signed-off-by: Marco Varlese <marco.varlese@suse.com>
---

diff --git a/src/vnet/ipsec/esp.h b/src/vnet/ipsec/esp.h
index 10f2f2df88a..8f7f8fab381 100644
--- a/src/vnet/ipsec/esp.h
+++ b/src/vnet/ipsec/esp.h
@@ -305,7 +305,7 @@ ipsec_proto_init ()
 			CLIB_CACHE_LINE_BYTES);
   int thread_id;
 
-  for (thread_id = 0; thread_id < tm->n_vlib_mains - 1; thread_id++)
+  for (thread_id = 0; thread_id < tm->n_vlib_mains; thread_id++)
     {
 #if OPENSSL_VERSION_NUMBER >= 0x10100000L
       em->per_thread_data[thread_id].encrypt_ctx = EVP_CIPHER_CTX_new ();