[ovs-git] [openvswitch/ovs] 729ba2: upcall: Unregister dpif cbs in udpif_destroy().

[GitHub]

  Branch: refs/heads/branch-2.4
  Home:   https://github.com/openvswitch/ovs
  Commit: 729ba25a35a578eddba97e79c301bfce34bbbdca
      https://github.com/openvswitch/ovs/commit/729ba25a35a578eddba97e79c301bfce34bbbdca
  Author: Joe Stringer <joe at ovn.org>
  Date:   2016-05-23 (Mon, 23 May 2016)

  Changed paths:
    M ofproto/ofproto-dpif-upcall.c

  Log Message:
  -----------
  upcall: Unregister dpif cbs in udpif_destroy().

During udpif_create(), we register callbacks for handling upcalls and
purging the datapath; however, in the corresponding udpif_destroy() we
never did this. This could potentially lead to dereference of
uninitialized memory in the userspace datapath if the main thread
destroys the udpif then executes an OpenFlow packet-out.

Backports: b803e6ac63f0 ("upcall: Unregister dpif cbs in udpif_destroy().")
Fixes: 623540e4617e ("dpif-netdev: Streamline miss handling.")
Reported-by: William Tu <u9012063 at gmail.com>
Signed-off-by: Joe Stringer <joe at ovn.org>
Acked-by: Ben Pfaff <blp at ovn.org>