[ovs-git] [openvswitch/ovs] 731222: odp-util: Fix netlink message overflow with userdata.
Ilya Maximets
noreply at github.com
Tue Dec 22 23:25:01 UTC 2020
Branch: refs/heads/branch-2.13
Home: https://github.com/openvswitch/ovs
Commit: 73122223065e105aa50a5cb17d09ae5f2cd6364b
https://github.com/openvswitch/ovs/commit/73122223065e105aa50a5cb17d09ae5f2cd6364b
Author: Ilya Maximets <i.maximets at ovn.org>
Date: 2020-12-22 (Tue, 22 Dec 2020)
Changed paths:
M lib/odp-util.c
M lib/odp-util.h
M ofproto/ofproto-dpif-upcall.c
M ofproto/ofproto-dpif-xlate.c
M tests/odp.at
Log Message:
-----------
odp-util: Fix netlink message overflow with userdata.
Too big userdata could overflow netlink message leading to out-of-bound
memory accesses or assertion while formatting nested actions.
Fix that by checking the size and returning correct error code.
Credit to OSS-Fuzz.
Reported-at: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27640
Fixes: e995e3df57ea ("Allow OVS_USERSPACE_ATTR_USERDATA to be variable length.")
Signed-off-by: Ilya Maximets <i.maximets at ovn.org>
Acked-by: Flavio Leitner <fbl at sysclose.org>
More information about the git
mailing list