commit 3833ffd6c648c5066448e598976810c85c66bd58
author Neale Ranns <nranns@cisco.com> Thu Mar 21 14:34:09 2019 +0000
committer Damjan Marion <dmarion@me.com> Mon Mar 25 20:03:24 2019 +0000
tree 60d55db908ec188a36a87fca60157f0379ec551b
parent 20ab31e8f6d96e95d0f921a7c8a7680d4f46790a

IPSEC tests fnd fix or Extended Sequence Numbers

Change-Id: Iad6c4b867961ec8036110a4e15a829ddb93193ed
Signed-off-by: Neale Ranns <nranns@cisco.com>

src/vnet/ipsec/ah_decrypt.c

diff --git a/src/vnet/ipsec/ah_decrypt.c b/src/vnet/ipsec/ah_decrypt.c
index b128dfa..b0916f9 100644
--- a/src/vnet/ipsec/ah_decrypt.c
+++ b/src/vnet/ipsec/ah_decrypt.c
@@ -162,8 +162,7 @@
 
 	      if (PREDICT_FALSE (rv))
 		{
-		  vlib_node_increment_counter (vm, node->node_index,
-					       AH_DECRYPT_ERROR_REPLAY, 1);
+		  i_b0->error = node->errors[AH_DECRYPT_ERROR_REPLAY];
 		  goto trace;
 		}
 	    }
@@ -207,9 +206,7 @@
 
 	      if (PREDICT_FALSE (memcmp (digest, sig, icv_size)))
 		{
-		  vlib_node_increment_counter (vm, node->node_index,
-					       AH_DECRYPT_ERROR_INTEG_ERROR,
-					       1);
+		  i_b0->error = node->errors[AH_DECRYPT_ERROR_INTEG_ERROR];
 		  goto trace;
 		}
 
@@ -236,9 +233,8 @@
 		next0 = AH_DECRYPT_NEXT_IP6_INPUT;
 	      else
 		{
-		  vlib_node_increment_counter (vm, node->node_index,
-					       AH_DECRYPT_ERROR_DECRYPTION_FAILED,
-					       1);
+		  i_b0->error =
+		    node->errors[AH_DECRYPT_ERROR_DECRYPTION_FAILED];
 		  goto trace;
 		}
 	    }