[ovs-dev] [PATCH v2] conntrack: Fix checks for TCP, UDP, and IPv6 header sizes.

[Ben Pfaff]

On Mon, Mar 06, 2017 at 11:00:05AM -0800, Daniele Di Proietto wrote:
> 2017-03-03 21:18 GMT-08:00 Ben Pfaff <blp at ovn.org>:
> > Otherwise a malformed packet could cause a read up to about 40 bytes past
> > the end of the packet.  The packet would still likely be dropped because
> > of checksum verification.
> >
> > Reported-by: Bhargava Shastry <bshastry at sec.t-labs.tu-berlin.de>
> > Signed-off-by: Ben Pfaff <blp at ovn.org>
> 
> Acked-by: Daniele Di Proietto <diproiettod at vmware.com>

Thanks, applied to master, branch-2.7, branch-2.6.