[ovs-git] Open vSwitch: flow: Enable retrieval of TCP flags from IPv6 traffic. (branch-1.6)

[dev at openvswitch.org]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "Open vSwitch".

The branch, branch-1.6 has been updated
       via  d4510d0aaa0a519f24d7bcbf86eaacfb39d474a7 (commit)
       via  73eb8208354d560bee34195193801329fb6f7339 (commit)
      from  5708fd1fc09fb2b23ce12ef7c94e579715c23c02 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit d4510d0aaa0a519f24d7bcbf86eaacfb39d474a7
Diffs: http://openvswitch.org/cgi-bin/gitweb.cgi?p=openvswitch;a=commitdiff;h=d4510d0aaa0a519f24d7bcbf86eaacfb39d474a7
Author: Jesse Gross <jesse at nicira.com>
		
flow: Enable retrieval of TCP flags from IPv6 traffic.
		
We currently check that a packet is IPv4 and TCP before fetching the
TCP flags.  This enables fetching from IPv6 packets as well.

Bug #10194

Reported-by: Michael Mao <mmao at nicira.com>
Signed-off-by: Jesse Gross <jesse at nicira.com>
Acked-by: Pravin B Shelar <pshelar at nicira.com>


commit 73eb8208354d560bee34195193801329fb6f7339
Diffs: http://openvswitch.org/cgi-bin/gitweb.cgi?p=openvswitch;a=commitdiff;h=73eb8208354d560bee34195193801329fb6f7339
Author: Jesse Gross <jesse at nicira.com>
		
flow: Add length check when retrieving TCP flags.
		
When collecting TCP flags we check that the IP header indicates that
a TCP header is present but not that the packet is actually long
enough to contain the header.  This adds a check to prevent reading
off the end of the packet.

In practice, this is only likely to result in reading of bad data and
not a crash due to the presence of struct skb_shared_info at the end
of the packet.

Signed-off-by: Jesse Gross <jesse at nicira.com>
Acked-by: Pravin B Shelar <pshelar at nicira.com>


-----------------------------------------------------------------------

Summary of changes:
 datapath/flow.c   |    6 ++++--
 lib/dpif-netdev.c |    4 +++-
 2 files changed, 7 insertions(+), 3 deletions(-)


hooks/post-receive
-- 
Open vSwitch