[IPSEC]: Make sure ESP output pads Null Encryption properly.

5ec5e62a · Joy Latten · David S. Miller · 897dde23 · 5ec5e62a
Commit 5ec5e62a authored Mar 02, 2003 by Joy Latten Committed by David S. Miller Mar 02, 2003
Show whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

net/ipv4/esp.c net/ipv4/esp.c +1 -1

No files found.
--- a/net/ipv4/esp.c
+++ b/net/ipv4/esp.c
@@ -360,7 +360,7 @@ int esp_output(struct sk_buff *skb)
 	esp = x->data;
 	alen = esp->auth.icv_trunc_len;
 	tfm = esp->conf.tfm;
-	blksize = crypto_tfm_alg_blocksize(tfm);
+	blksize = (crypto_tfm_alg_blocksize(tfm) + 3) & ~3;
 	clen = (clen + 2 + blksize-1)&~(blksize-1);
 	if (esp->conf.padlen)
 		clen = (clen + esp->conf.padlen-1)&~(esp->conf.padlen-1);