Commit 3fa03421 authored by John Baldwin's avatar John Baldwin
Browse files

ktls: Fix non-inplace TLS 1.3 encryption.

Copy the iovec for the trailer from the proper place.  This is the same
fix for CBC encryption from ff6a7e4b.

Reported by:	gallatin
Reviewed by:	gallatin, markj
Fixes:		49f6925c
Sponsored by:	Netflix
Differential Revision:	https://reviews.freebsd.org/D29177
parent 2cee045b
......@@ -574,7 +574,7 @@ ktls_ocf_tls13_aead_encrypt(struct ktls_session *tls,
if (!inplace) {
/* Duplicate the output iov to append the trailer. */
memcpy(out_iov, outiov, outiovcnt * sizeof(*out_iov));
out_iov[outiovcnt] = iov[outiovcnt];
out_iov[outiovcnt] = iov[iniovcnt];
out_uio.uio_iov = out_iov;
out_uio.uio_iovcnt = outiovcnt + 1;
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment