[ovs-dev] [PATCH] flow: Fix wild pointer dereference in flow_compose().

Ben Pfaff blp at nicira.com
Wed Aug 1 20:26:54 UTC 2012


On Wed, Aug 01, 2012 at 01:19:56PM -0700, Ethan Jackson wrote:
> The 'ip' variable in flow_compose() points to some memory allocated
> in an ofpbuf.  The ofpbuf is modified without making the necessary
> updates to the location of 'ip' causing a potential wild memory
> access.
> 
> Found by inspection.
> 
> Signed-off-by: Ethan Jackson <ethan at nicira.com>

Looks good.

This is a fairly old bug, I think, so should you backport this?



More information about the dev mailing list