ipsec: fix use of uninitialized variable

Defects reported by coverity scan
uninit_use_in_call: Using uninitialized element of array clen when
calling cpu_crypto_bulk.

Coverity issue: 354233, 354234
Fixes: 957394f72658 ("ipsec: support CPU crypto mode")
Signed-off-by: Konstantin Ananyev <konstantin.ananyev@intel.com>
Acked-by: Bernard Iremonger <bernard.iremonger@intel.com>

diff --git a/lib/librte_ipsec/esp_inb.c b/lib/librte_ipsec/esp_inb.c
index 7b8ab81f648d5c84bb999395ee1e3e492839d4b8..96eec0131fe3cf6cc21d00325eacbd96af8c736b 100644 (file)
--- a/lib/librte_ipsec/esp_inb.c
+++ b/lib/librte_ipsec/esp_inb.c
@@ -737,7 +737,9 @@ cpu_inb_pkt_prepare(const struct rte_ipsec_session *ss,
                move_bad_mbufs(mb, dr, num, num - k);
 
        /* convert mbufs to iovecs and do actual crypto/auth processing */
-       cpu_crypto_bulk(ss, sa->cofs, mb, iv, aad, dgst, l4ofs, clen, k);
+       if (k != 0)
+               cpu_crypto_bulk(ss, sa->cofs, mb, iv, aad, dgst,
+                       l4ofs, clen, k);
        return k;
 }
 

diff --git a/lib/librte_ipsec/esp_outb.c b/lib/librte_ipsec/esp_outb.c
index b6d9cbe98b160bf64e0483622b3da1f5959ff2a7..fb9d5864c8619e552f287dc33983e5cffaeb610e 100644 (file)
--- a/lib/librte_ipsec/esp_outb.c
+++ b/lib/librte_ipsec/esp_outb.c
@@ -502,7 +502,9 @@ cpu_outb_pkt_prepare(const struct rte_ipsec_session *ss,
                move_bad_mbufs(mb, dr, n, n - k);
 
        /* convert mbufs to iovecs and do actual crypto/auth processing */
-       cpu_crypto_bulk(ss, sa->cofs, mb, iv, aad, dgst, l4ofs, clen, k);
+       if (k != 0)
+               cpu_crypto_bulk(ss, sa->cofs, mb, iv, aad, dgst,
+                       l4ofs, clen, k);
        return k;
 }
 

diff --git a/lib/librte_ipsec/misc.h b/lib/librte_ipsec/misc.h
index 53c0457af58c1ee541bc16c0abdef49289e639e1..1b543ed8753bde6bfa8657913987ea824653bceb 100644 (file)
--- a/lib/librte_ipsec/misc.h
+++ b/lib/librte_ipsec/misc.h
@@ -106,7 +106,8 @@ mbuf_cut_seg_ofs(struct rte_mbuf *mb, struct rte_mbuf *ms, uint32_t ofs,
 }
 
 /*
- * process packets using sync crypto engine
+ * process packets using sync crypto engine.
+ * expects *num* to be greater than zero.
  */
 static inline void
 cpu_crypto_bulk(const struct rte_ipsec_session *ss,