[ovs-dev] the host will be soft lookup when some illeagal packets attack host
pravin shelar
pshelar at ovn.org
Tue Aug 9 15:48:36 UTC 2016
On Mon, Aug 8, 2016 at 8:32 PM, Zhangkun (K) <zhang.zhangkun at huawei.com> wrote:
> diff --git a/datapath/linux/compat/flow_dissector.c b/datapath/linux/compat/flow_dissector.c
> index 3f42dba..4c5d023 100644
> --- a/datapath/linux/compat/flow_dissector.c
> +++ b/datapath/linux/compat/flow_dissector.c
> @@ -77,7 +77,7 @@ again:
> struct iphdr _iph;
> ip:
> iph = skb_header_pointer(skb, nhoff, sizeof(_iph), &_iph);
> - if (!iph)
> + if (!iph || iph->ihl < 5)
> return false;
> if (ip_is_fragment(iph))
>
>
Good catch. Can you send formal patch?
Thanks.
More information about the dev
mailing list