[ovs-dev] [PATCH] Fix a memory corruption in CFM

[Ben Pfaff]

On Wed, Sep 04, 2013 at 12:36:50AM -0700, gyang at nicira.com wrote:
> From: Guolin Yang <gyang at nicira.com>
> 
> In cfm, when allocating the rmp array, the size is not calculated correctly
> which will cause memory corruption.
> 
> Signed-off-by: Guolin Yang <gyang at nicira.com>

Thanks for the patch.  It is obviously correct.

But I am not sure that there is any real memory corruption.  Obviously
there would be, if any of the callers modified the allocated memory.
But I do not see any of the chain of callers doing that: I only see them
reading it and eventually freeing it.  This will not corrupt any
memory.  Do you see anything different?

Thanks,

Ben.