[ovs-dev] [PATCH] ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod().

[Ben Pfaff]

Thanks!  I applied this to master and backported as far as branch-2.4.

On Fri, Jul 07, 2017 at 10:01:30AM -0700, Yi-Hung Wei wrote:
> Acked-by: Yi-Hung Wei <yihung.wei at gmail.com>
> 
> On Thu, Jul 6, 2017 at 4:46 PM, Ben Pfaff <blp at ovn.org> wrote:
> > On Fri, May 26, 2017 at 12:59:06PM -0700, Ben Pfaff wrote:
> >> This code blindly read forward for the number of bytes specified by the
> >> message without checking that it was in range.
> >>
> >> This bug is part of OpenFlow 1.5 support.  Open vSwitch does not enable
> >> OpenFlow 1.5 support by default.
> >>
> >> Reported-by: Bhargava Shastry <bshastry at sec.t-labs.tu-berlin.de>
> >> Signed-off-by: Ben Pfaff <blp at ovn.org>
> >
> > This patch needs a review.
> > _______________________________________________
> > dev mailing list
> > dev at openvswitch.org
> > https://mail.openvswitch.org/mailman/listinfo/ovs-dev