[ovs-dev] [PATCH] ipf: bail out when ipf state is COMPLETED

Ben Pfaff blp at ovn.org
Fri Nov 22 00:47:23 UTC 2019


On Thu, Nov 14, 2019 at 07:38:55AM -0800, Darrell Ball wrote:
> Hi RongQing/Wang
> 
> On Thu, Nov 14, 2019 at 1:26 AM Li RongQing <lirongqing at baidu.com> wrote:
> 
> > it is easy to crash ovs when a packet with same id
> > hits a list that already reassembled completedly
> > but have not been sent out yet, and this packet is
> > not duplicate with this hit ipf list due to bigger
> > offset
> >
> >     1  0x00007f9fef0ae2d9 in __GI_abort () at abort.c:89
> >
> 
> Good DOS test.
> Fix is correct.
> 
> This needs a 'Fixes' tag.
> Fixes: 4ea96698f667 ("Userspace datapath: Add fragmentation handling.")
> 
> This will need to be backported to 2.10.

I pushed to master and branch-2.12.  2.11 and 2.10 need some kind of
conflict resolution.


More information about the dev mailing list