Code Review / vpp.git / commit
? search:
summary | shortlog | log | commit | commitdiff | review | tree
(parent: 3a23f9e) | patch
ipsec: ipsec-input: check for too-short packets 93/22993/2
authorBenoît Ganne <bganne@cisco.com>
Fri, 25 Oct 2019 13:26:27 +0000 (15:26 +0200)
committerNeale Ranns <nranns@cisco.com>
Tue, 5 Nov 2019 08:40:54 +0000 (08:40 +0000)
commitf7f49640bbb4339d71f8b713b04b8f401d5fc270
tree87a5f8163461a03b0daa62049fb38d475c268f4ctree | snapshot
parent3a23f9e30d893d9feee2de80dbfb17951a4d89dacommit | diff
ipsec: ipsec-input: check for too-short packets

Make sure packet is big enough before processing it.
Policy matching is done speculatively but is discarded if packet is too
short.

Type: fix

Change-Id: I647db2c4e568b0d9bf2cfd5056e1b1c2e25132fe
Signed-off-by: Benoît Ganne <bganne@cisco.com>
src/vnet/ipsec/ipsec_input.c diff | blob | history
Vector Packet Processing