On 11 Mar 2022, at 21:38, Paolo Valerio wrote:
> Considering the following flows:
>
> ovs-ofctl dump-flows br0
> cookie=0x0, duration=2431.944s, table=0, n_packets=0, n_bytes=0, priority=0
> actions=NORMAL
>
> and assuming a packet originated from packet-out in this way:
>
> ovs-ofctl packet-out br0
> "in_port=controller,packet=50540000000a50540000000908004500001c000000000011a4cd0a0101010a0101020001000200080000,
> action=ct(table=0)"
>
> If in_port is OFPP_NONE or OFPP_CONTROLLER, this leads to a
> NULL pointer (xport) dereference in xlate_normal().
>
> Fix it by checking the xport pointer validity while deciding whether
> it is a candidate for mac learning or not.
>
> Signed-off-by: Paolo Valerio <[email protected]>
> ---
Reviewed and tested, and all looks fine.
Acked-by: Eelco Chaudron <[email protected]>
_______________________________________________
dev mailing list
[email protected]
https://mail.openvswitch.org/mailman/listinfo/ovs-dev