[ovs-dev] the host will be soft lookup when some illeagal packets attack host

pravin shelar pshelar at ovn.org
Tue Aug 9 15:48:36 UTC 2016


On Mon, Aug 8, 2016 at 8:32 PM, Zhangkun (K) <zhang.zhangkun at huawei.com> wrote:
> diff --git a/datapath/linux/compat/flow_dissector.c b/datapath/linux/compat/flow_dissector.c
> index 3f42dba..4c5d023 100644
> --- a/datapath/linux/compat/flow_dissector.c
> +++ b/datapath/linux/compat/flow_dissector.c
> @@ -77,7 +77,7 @@ again:
>                 struct iphdr _iph;
> ip:
>                 iph = skb_header_pointer(skb, nhoff, sizeof(_iph), &_iph);
> -               if (!iph)
> +               if (!iph || iph->ihl < 5)
>                         return false;
>                 if (ip_is_fragment(iph))
>
>
Good catch. Can you send formal patch?

Thanks.



More information about the dev mailing list