[ovs-dev] [PATCH v2] datapath-windows: Add validations in fragmentation module
Ben Pfaff
blp at ovn.org
Mon Jul 10 18:15:14 UTC 2017
On Fri, Jun 09, 2017 at 07:54:45PM -0700, Anand Kumar wrote:
> - Minimum valid fragment size is 400 bytes, any fragment smaller
> is likely to be intentionally crafted (CVE-2000-0305).
>
> - Validate maximum length of an Ip datagram
>
> - Added counters to keep track of number of fragments for a given
> Ip datagram.
>
> Signed-off-by: Anand Kumar <kumaranand at vmware.com>
> Acked-by: Alin Gabriel Serdean <aserdean at cloudbasesolutions.com>
> ---
> v1->v2: Update commmit message to add (CVE-2000-0305) vulnerability
Applied to master, thanks!
(Let me know if this should be backported.)
More information about the dev
mailing list