This patch set fixes some basic issues with __skb_flow_dissect function.
Items addressed:
- Cleanup control flow in the fucntion; in particular eliminate a
bunch of goto's and implement a simplified control flow model
- Add limits for number of encapsulations of extension headers that
can be dissected
Tested:
Ran normal traffic, GUE, and VXLAN traffic.
Tom Herbert (2):
flow_dissector: Cleanup control flow
flow_dissector: Add limits for encapsulation and EH
include/net/flow_dissector.h | 9 ++
net/core/flow_dissector.c | 267 ++++++++++++++++++++++++++++++-------------
2 files changed, 198 insertions(+), 78 deletions(-)
--
2.11.0
