[PATCH] crypto: ipsec_mb fix OOP SGL for NULL cipher

[Ji, Kai]

Acked-by: Kai Ji <kai.ji at intel.com>

________________________________
From: Nicolau, Radu <radu.nicolau at intel.com>
Sent: 06 October 2026 11:53
To: dev at dpdk.org <dev at dpdk.org>
Cc: Alexander.Konyukhov at kaspersky.com <Alexander.Konyukhov at kaspersky.com>; Nicolau, Radu <radu.nicolau at intel.com>; stable at dpdk.org <stable at dpdk.org>; Ji, Kai <kai.ji at intel.com>; De Lara Guarch, Pablo <pablo.de.lara.guarch at intel.com>; Fan Zhang <fanzhang.oss at gmail.com>; Doherty, Declan <declan.doherty at intel.com>
Subject: [PATCH] crypto: ipsec_mb fix OOP SGL for NULL cipher

For the NULL cipher OOP SGL case should be handled
by the linear buffer SGL path

Fixes: 03944ff5e3df ("crypto/ipsec_mb: support null auth/cipher for aesni_mb")
Cc: stable at dpdk.org

Signed-off-by: Radu Nicolau <radu.nicolau at intel.com>
---
 drivers/crypto/ipsec_mb/pmd_aesni_mb.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/drivers/crypto/ipsec_mb/pmd_aesni_mb.c b/drivers/crypto/ipsec_mb/pmd_aesni_mb.c
index ab65316978..90989c9a69 100644
--- a/drivers/crypto/ipsec_mb/pmd_aesni_mb.c
+++ b/drivers/crypto/ipsec_mb/pmd_aesni_mb.c
@@ -2142,7 +2142,8 @@ set_mb_job_params(IMB_JOB *job, struct ipsec_mb_qp *qp,
                 job->msg_len_to_cipher_in_bytes = op->sym->cipher.data.length;
         }

-       if (cipher_mode == IMB_CIPHER_NULL && oop) {
+       /* NULL cipher OOP SGL case handled by the linear buffer SGL code */
+       if (cipher_mode == IMB_CIPHER_NULL && oop && !sgl) {
                 memcpy(job->dst + job->cipher_start_src_offset_in_bytes,
                         job->src + job->cipher_start_src_offset_in_bytes,
                         job->msg_len_to_cipher_in_bytes);
--
2.52.0

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mails.dpdk.org/archives/dev/attachments/20261006/17c4b53a/attachment-0001.htm>