Bug 208121
Summary: | IPsec AH ICV Padding for IPv4 | ||
---|---|---|---|
Product: | Networking | Reporter: | Markus Gasser (markus.gasser) |
Component: | Other | Assignee: | Stephen Hemminger (stephen) |
Status: | RESOLVED PATCH_ALREADY_AVAILABLE | ||
Severity: | normal | CC: | herbert, tobias |
Priority: | P1 | ||
Hardware: | All | ||
OS: | Linux | ||
Kernel Version: | 5.4.0.37.40 | Subsystem: | |
Regression: | No | Bisected commit-id: | |
Attachments: | packet capture |
Description
Markus Gasser
2020-06-10 09:32:26 UTC
To avoid the incorrect padding/alignment, IPv4 AH states have to be marked with the XFRM_STATE_ALIGN4 flag. Yes this was fixed years ago, please use XFRM_STATE_ALIGN4: commit fa9921e46fd52b78070dc67ce0d27ec301a90410 Author: Nicolas Dichtel <nicolas.dichtel@6wind.com> Date: Wed Feb 2 06:29:02 2011 +0000 ipsec: allow to align IPv4 AH on 32 bits Thank you for your replies, using the align4 flag indeed solves the problem. |