[ovs-dev] [PATCH v2] datapath-windows: Add validations in fragmentation module

Ben Pfaff blp at ovn.org
Mon Jul 10 18:15:14 UTC 2017


On Fri, Jun 09, 2017 at 07:54:45PM -0700, Anand Kumar wrote:
> - Minimum valid fragment size is 400 bytes, any fragment smaller
> is likely to be intentionally crafted (CVE-2000-0305).
> 
> - Validate maximum length of an Ip datagram
> 
> - Added counters to keep track of number of fragments for a given
> Ip datagram.
> 
> Signed-off-by: Anand Kumar <kumaranand at vmware.com>
> Acked-by: Alin Gabriel Serdean <aserdean at cloudbasesolutions.com>
> ---
> v1->v2: Update commmit message to add (CVE-2000-0305) vulnerability

Applied to master, thanks!

(Let me know if this should be backported.)


More information about the dev mailing list