little fix for print-esp.c

[Francis Dupont <Francis.Dupont () enst-bretagne fr>]

ESP decryption should not be performed on the authentication trailer...

Regards

Francis.Dupont () enst-bretagne fr

PS: here is the fix (for tcpdump 3.8.3 release):

*** print-esp.c-orig    Wed Nov 19 06:36:40 2003
--- print-esp.c Thu Apr  8 12:15:37 2004
***************
*** 475,480 ****
--- 475,481 ----
        ivlen = sa->ivlen;
        secret = sa->secret;
        espsecret_keylen = sa->secretlen;
+       ep = ep - sa->authlen;
  
        if (sa->evp) {
                memset(&ctx, 0, sizeof(ctx));
***************
*** 490,496 ****
        } else
                advance = sizeof(struct newesp);
  
-       ep = ep - sa->authlen;
        /* sanity check for pad length */
        if (ep - bp < *(ep - 2))
                goto fail;
--- 491,496 ----
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.