[ovs-dev] [PATCH] odp-util: Avoid reading wrong table in generate_all_wildcard_mask().

Justin Pettit jpettit at ovn.org
Wed Dec 20 23:12:43 UTC 2017



> On Nov 27, 2017, at 9:20 AM, Ben Pfaff <blp at ovn.org> wrote:
> 
> These lines of code are intended to copy the 'next' and 'next_max' members
> of tbl[type] into local variables 'tbl' and 'max':
>            tbl = tbl[type].next;
>            max = tbl[type].next_max;
> They didn't do it properly because the first line changes 'tbl', so that
> the first and seconds lines' references to tbl[type] refer to different
> objects.
> 
> This commit fixes the problem.
> 
> Found by libfuzzer.
> 
> Reported-by: Bhargava Shastry <bshastry at sec.t-labs.tu-berlin.de>
> Signed-off-by: Ben Pfaff <blp at ovn.org>

Acked-by: Justin Pettit <jpettit at ovn.org>

--Justin




More information about the dev mailing list