From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-wr1-f53.google.com (mail-wr1-f53.google.com [209.85.221.53]) by dpdk.org (Postfix) with ESMTP id 03C8F4C9B for ; Fri, 27 Jul 2018 12:17:57 +0200 (CEST) Received: by mail-wr1-f53.google.com with SMTP id h9-v6so4536498wro.3 for ; Fri, 27 Jul 2018 03:17:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:in-reply-to:references; bh=4Iochb2AwXjAbQq4a0iR3+8i/gu8Eva38zqc8UvTkVQ=; b=iiSneS2vrvEDG8Cd6CcKW0yvetr+Si0oUoS/NinjWVOtoXgQyQygwo//lcz5vYTuQc qWIaxL5rL8CFc0UseQavhxexjmxY7SM0WQkfZVIVuz7gIUYy4T8dHd6UpbhJfE+tAtfg oiSqki2W3x1k5OrwRw8LBOWxMBIZxp6vvMtO2mw+cWpJ6GTq8MbwZzBO4TE+vkUtSudu xUxQsOoPH3tMLM9tOO8iCsuD/ajEig0JG59FozvYFIrKgBwofQJe3G/QN9QQfGVCFK2P L9KoNVP+DqHo0C8NFayUNMNIrRWGlj/MPtdbHjY2QQ0dyurs46O38T1Rf7WbmGg1c2iY OLEQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=4Iochb2AwXjAbQq4a0iR3+8i/gu8Eva38zqc8UvTkVQ=; b=mGYKvAtqnu8OtOCuxXzDfo0n2ZHJVGKRtCdH4MKmZPqb+fwXDDFARWgLpYnhw78j2Z K6LrymFoVaLpjhW1G1pqeAh8gpuC8RCWqj78ZSiIR1HFZUyOcQaA6kGkJW5L5qYTdFRK 381WuVgRyJsdDZqjktN3Ql4LgofVgIGkHJaaVOgMfd0LIw1zqMkrrvdT3yGBfCTQji7t KcNhS4klxYaTeEJx3UrxZNOR6HOg6KFhCoGWPP8QacGpS+kgP4b3QCYtt8uM6Dx2+hZ5 q5AXzQvjMETtgPwdBPolfJZScH8qiblbWfMwpBF4hiMGf5yGHKekj6blYyBjIZihKcvk PEog== X-Gm-Message-State: AOUpUlEATqYyxQ1dyhmqGhqAxoOqAKy+pd4V/nKkJi8qislNBA26/iio h/F+ASmoN+iGc1eC14iHD8Y= X-Google-Smtp-Source: AAOMgpfiLDET+88+a6L8SmxeGbUqqNmlBwpeWt/DaV7XZEJxEm/kbDqBOaPfXyR3bQbImgQwEPBhQQ== X-Received: by 2002:adf:9b11:: with SMTP id b17-v6mr4224593wrc.119.1532686677793; Fri, 27 Jul 2018 03:17:57 -0700 (PDT) Received: from localhost ([2a00:23c5:be94:4600:7b12:f8a0:fd52:f87d]) by smtp.gmail.com with ESMTPSA id w62-v6sm4134634wmg.46.2018.07.27.03.17.56 (version=TLS1_2 cipher=ECDHE-RSA-CHACHA20-POLY1305 bits=256/256); Fri, 27 Jul 2018 03:17:56 -0700 (PDT) From: luca.boccassi@gmail.com To: Konstantin Ananyev Cc: Akhil Goyal , dpdk stable Date: Fri, 27 Jul 2018 11:17:38 +0100 Message-Id: <20180727101748.30228-2-luca.boccassi@gmail.com> X-Mailer: git-send-email 2.18.0 In-Reply-To: <20180727101748.30228-1-luca.boccassi@gmail.com> References: <20180724160752.20287-34-luca.boccassi@gmail.com> <20180727101748.30228-1-luca.boccassi@gmail.com> Subject: [dpdk-stable] patch 'examples/ipsec-secgw: fix bypass rule processing' has been queued to LTS release 16.11.8 X-BeenThere: stable@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: patches for DPDK stable branches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 27 Jul 2018 10:17:58 -0000 Hi, FYI, your patch has been queued to LTS release 16.11.8 Note it hasn't been pushed to http://dpdk.org/browse/dpdk-stable yet. It will be pushed if I get no objections before 07/29/18. So please shout if anyone has objections. Thanks. Luca Boccassi --- >>From 3ad29c23287477c8f2ad8e803954b70a6dca443c Mon Sep 17 00:00:00 2001 From: Konstantin Ananyev Date: Tue, 5 Jun 2018 15:16:02 +0100 Subject: [PATCH] examples/ipsec-secgw: fix bypass rule processing [ upstream commit c1fe6dbfcec2b17dd5fd115dcdec2ea573c4de0d ] For outbound ports BYPASS rule is erroneously treated as PROTECT one with SA idx zero. Fixes: 2a5106af132b ("examples/ipsec-secgw: fix corner case for SPI value") Signed-off-by: Konstantin Ananyev Acked-by: Akhil Goyal --- examples/ipsec-secgw/ipsec-secgw.c | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/examples/ipsec-secgw/ipsec-secgw.c b/examples/ipsec-secgw/ipsec-secgw.c index 315a68074..05c76459b 100644 --- a/examples/ipsec-secgw/ipsec-secgw.c +++ b/examples/ipsec-secgw/ipsec-secgw.c @@ -478,11 +478,13 @@ outbound_sp(struct sp_ctx *sp, struct traffic_type *ip, sa_idx = ip->res[i] & PROTECT_MASK; if (ip->res[i] & DISCARD) rte_pktmbuf_free(m); + else if (ip->res[i] & BYPASS) + ip->pkts[j++] = m; else if (sa_idx < IPSEC_SA_MAX_ENTRIES) { ipsec->res[ipsec->num] = sa_idx; ipsec->pkts[ipsec->num++] = m; - } else /* BYPASS */ - ip->pkts[j++] = m; + } else /* invalid SA idx */ + rte_pktmbuf_free(m); } ip->num = j; } -- 2.18.0