[PATCH v3 10/10] net/iavf: fix IPsec flow metadata leaks
Radu Nicolau
radu.nicolau at intel.com
Tue Oct 20 11:36:07 CEST 2026
On 20-Oct-26 10:11 AM, Anatoly Burakov wrote:
> IPsec flow parsing leaves the pattern-match item allocated after
> extracting its metadata. It also leaves the parsed flow item allocated
> when no metadata output is requested.
>
> Free the pattern-match item after parsing and free the parsed flow item
> when it cannot be returned to the caller. Propagate pattern-match failure
> and report a parsing error when no flow item was produced.
>
> Fixes: 6bc987ecb860 ("net/iavf: support IPsec inline crypto")
> Cc:stable at dpdk.org
>
> Signed-off-by: Anatoly Burakov<anatoly.burakov at intel.com>
> ---
Acked-by: Radu Nicolau <radu.nicolau at intel.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mails.dpdk.org/archives/dev/attachments/20261020/309a61a7/attachment-0001.htm>
More information about the dev
mailing list