[ovs-git] Open vSwitch: flow: Enable retrieval of TCP flags from IPv6 traffic. (master)

[dev at openvswitch.org]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "Open vSwitch".

The branch, master has been updated
       via  11460e2316b88f0bd0ea0005d94338d800ea16bd (commit)
       via  9c47b45a3bb56009bf2553c493d097eeadd7e5c2 (commit)
      from  c1f15723c03d1ed734ed1c2d2ac85e6c8b055206 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 11460e2316b88f0bd0ea0005d94338d800ea16bd
Diffs: http://openvswitch.org/cgi-bin/gitweb.cgi?p=openvswitch;a=commitdiff;h=11460e2316b88f0bd0ea0005d94338d800ea16bd
Author: Jesse Gross <jesse at nicira.com>
		
flow: Enable retrieval of TCP flags from IPv6 traffic.
		
We currently check that a packet is IPv4 and TCP before fetching the
TCP flags.  This enables fetching from IPv6 packets as well.

Bug #10194

Reported-by: Michael Mao <mmao at nicira.com>
Signed-off-by: Jesse Gross <jesse at nicira.com>
Acked-by: Pravin B Shelar <pshelar at nicira.com>


commit 9c47b45a3bb56009bf2553c493d097eeadd7e5c2
Diffs: http://openvswitch.org/cgi-bin/gitweb.cgi?p=openvswitch;a=commitdiff;h=9c47b45a3bb56009bf2553c493d097eeadd7e5c2
Author: Jesse Gross <jesse at nicira.com>
		
flow: Add length check when retrieving TCP flags.
		
When collecting TCP flags we check that the IP header indicates that
a TCP header is present but not that the packet is actually long
enough to contain the header.  This adds a check to prevent reading
off the end of the packet.

In practice, this is only likely to result in reading of bad data and
not a crash due to the presence of struct skb_shared_info at the end
of the packet.

Signed-off-by: Jesse Gross <jesse at nicira.com>
Acked-by: Pravin B Shelar <pshelar at nicira.com>


-----------------------------------------------------------------------

Summary of changes:
 datapath/flow.c   |    6 ++++--
 lib/dpif-netdev.c |    4 +++-
 2 files changed, 7 insertions(+), 3 deletions(-)


hooks/post-receive
-- 
Open vSwitch