Skip to content
Commit ebd89a2d authored by Gilad Ben-Yossef's avatar Gilad Ben-Yossef Committed by Steffen Klassert
Browse files

IPsec: do not ignore crypto err in ah4 input



ah4 input processing uses the asynchronous hash crypto API which
supplies an error code as part of the operation completion but
the error code was being ignored.

Treat a crypto API error indication as a verification failure.

While a crypto API reported error would almost certainly result
in a memcpy of the digest failing anyway and thus the security
risk seems minor, performing a memory compare on what might be
uninitialized memory is wrong.

Signed-off-by: default avatarGilad Ben-Yossef <gilad@benyossef.com>
Signed-off-by: default avatarSteffen Klassert <steffen.klassert@secunet.com>
parent 3819a35f
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment