[ovs-git] [openvswitch/ovs] d3f396: datapath: fix potential out of bound access in par...

[GitHub]

  Branch: refs/heads/branch-2.6
  Home:   https://github.com/openvswitch/ovs
  Commit: d3f3960ee4a165452146e988d876418cb93f2879
      https://github.com/openvswitch/ovs/commit/d3f3960ee4a165452146e988d876418cb93f2879
  Author: Greg Rose <gvrose8192 at gmail.com>
  Date:   2017-07-26 (Wed, 26 Jul 2017)

  Changed paths:
    M datapath/conntrack.c

  Log Message:
  -----------
  datapath: fix potential out of bound access in parse_ct

Upstream commit:
    commit 69ec932e364b1ba9c3a2085fe96b76c8a3f71e7c
    Author: Liping Zhang <zlpnobody at gmail.com>
    Date:   Sun Jul 23 17:52:23 2017 +0800

    openvswitch: fix potential out of bound access in parse_ct

    Before the 'type' is validated, we shouldn't use it to fetch the
    ovs_ct_attr_lens's minlen and maxlen, else, out of bound access
    may happen.

    Fixes: 7f8a436eaa2c ("openvswitch: Add conntrack action")
    Signed-off-by: Liping Zhang <zlpnobody at gmail.com>
    Acked-by: Pravin B Shelar <pshelar at ovn.org>
    Signed-off-by: David S. Miller <davem at davemloft.net>

Pick up an upstream bug fix.

Fixes: a94ebc39996b ("datapath: Add conntrack action")
Signed-off-by: Greg Rose <gvrose8192 at gmail.com>
Signed-off-by: Joe Stringer <joe at ovn.org>