On Thu, Jan 31, 2019 at 1:17 PM Greg Rose <gvrose8...@gmail.com> wrote: > > From: Ross Lagerwall <ross.lagerw...@citrix.com> > > Upstream commit: > commit 04a4af334b971814eedf4e4a413343ad3287d9a9 > Author: Ross Lagerwall <ross.lagerw...@citrix.com> > Date: Mon Jan 14 09:16:56 2019 +0000 > > openvswitch: Avoid OOB read when parsing flow nlattrs > > For nested and variable attributes, the expected length of an attribute > is not known and marked by a negative number. This results in an OOB > read when the expected length is later used to check if the attribute is > all zeros. Fix this by using the actual length of the attribute rather > than the expected length. > > Signed-off-by: Ross Lagerwall <ross.lagerw...@citrix.com> > Acked-by: Pravin B Shelar <pshe...@ovn.org> > Signed-off-by: David S. Miller <da...@davemloft.net> > > Cc: Ross Lagerwall <ross.lagerw...@citrix.com> > Signed-off-by: Greg Rose <gvrose8...@gmail.com> > --- Thanks for the backport. I am good with the whole series.
Acked-by: Yi-Hung Wei <yihung....@gmail.com> _______________________________________________ dev mailing list d...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-dev
