Hi,
Thanks for the patch but please note that the dpdk ipsec backend is deprecated
since 21.06 in favor of the vpp async crypto infra (which does support dpdk
cryptodev).
You might want to update your VPP instead.
Best
ben
> -----Original Message-----
> From: vpp-dev@lists.fd.io <vpp-dev@lists.fd.io> On Behalf Of
> jins...@chinatelecom.cn
> Sent: Friday, April 1, 2022 9:26
> To: vpp-dev <vpp-dev@lists.fd.io>
> Subject: [vpp-dev] VPP2101 IPsec with DPDK Cryptodev case dpdk crypto pool
> resource leak
>
>
>
> I found dpdk crypto pool resource leak in using IPsec with DPDK
> Cryptodev in vpp 2101 version.when the abnormal ipsec packet was
> received,
> need drop it,but case dpdk crypto pools buffer resource leak.
>
>
>
>
> * I have made the following modification, please check whether it is
> correct:
>
> diff --git a/src/plugins/dpdk/ipsec/esp_decrypt.c
> b/src/plugins/dpdk/ipsec/esp_decrypt.c
>
> index 4981de334..3bbeab765 100644
>
> --- a/src/plugins/dpdk/ipsec/esp_decrypt.c
>
> +++ b/src/plugins/dpdk/ipsec/esp_decrypt.c
>
> @@ -163,7 +163,6 @@ dpdk_esp_decrypt_inline (vlib_main_t * vm,
>
> CLIB_PREFETCH (mb0, CLIB_CACHE_LINE_BYTES, STORE);
>
>
>
> op = ops[0];
>
> - ops += 1;
>
> ASSERT (op->status == RTE_CRYPTO_OP_STATUS_NOT_PROCESSED);
>
>
>
> dpdk_op_priv_t *priv = crypto_op_get_priv (op);
>
> @@ -353,6 +352,7 @@ dpdk_esp_decrypt_inline (vlib_main_t * vm,
>
>
>
> crypto_op_setup (is_aead, mb0, op, session, cipher_off,
> cipher_len,
>
> 0, auth_len, aad, digest, digest_paddr);
>
> + ops += 1;
>
> trace:
>
> if (PREDICT_FALSE (b0->flags & VLIB_BUFFER_IS_TRACED))
>
> {
>
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#21179): https://lists.fd.io/g/vpp-dev/message/21179
Mute This Topic: https://lists.fd.io/mt/90172971/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
