Re: [PATCH v2 net-next] IPsec: do not ignore crypto err in ah input

2017-01-15 Thread Steffen Klassert
On Sun, Jan 15, 2017 at 08:09:43AM +0200, Gilad Ben-Yossef wrote: > ah input processing uses the asynchronous hash crypto API which supplies > an error code as part of the operation completion but the error code was > being ignored. > > Treat a crypto API error indication as a verification failu

[PATCH v2 net-next] IPsec: do not ignore crypto err in ah input

2017-01-14 Thread Gilad Ben-Yossef
ah input processing uses the asynchronous hash crypto API which supplies an error code as part of the operation completion but the error code was being ignored. Treat a crypto API error indication as a verification failure. While a crypto API reported error would almost certainly result in a m