Change the way IP header pointer is calculated in esp_decrypt nodes 04/12504/2
authorSzymon Sliwa <szs@semihalf.com>
Wed, 9 May 2018 12:28:08 +0000 (14:28 +0200)
committerDamjan Marion <dmarion.lists@gmail.com>
Thu, 10 May 2018 14:11:13 +0000 (14:11 +0000)
commit65a27279af2bead3be65ab0cb2a0bc2b79e00f42
tree08b0ea77e6d11500faffa539b0797473d2eabb36
parent7cb7bb3fa1eca927cd33d8b434ce0eac1d57a987
Change the way IP header pointer is calculated in esp_decrypt nodes

The pointer to IP header was derived from l3_hdr_offset,
which would be ok, if l3_hdr_offset was valid. But it does not
have to be, so it was a bad solution. Now the previous nodes
mark whether it is a IPv6 or IPv4 packet tyle, and in esp_decrypt
we count get ip header pointer by substracting the size
of the ip header from the pointer to esp header (which lies
in front of the ip header).

Change-Id: I6d425b90931053711e8ce9126811b77ae6002a16
Signed-off-by: Szymon Sliwa <szs@semihalf.com>
src/plugins/dpdk/ipsec/esp_decrypt.c
src/vnet/ipsec/esp_decrypt.c
src/vnet/ipsec/ipsec_input.c