[ovs-git] [openvswitch/ovs] abd7a4: flow: Support extra padding length.

Flavio Leitner noreply at github.com
Wed Feb 10 14:14:39 UTC 2021


  Branch: refs/heads/branch-2.11
  Home:   https://github.com/openvswitch/ovs
  Commit: abd7a457652e6734902720fe6a5dddb3fc0d1e3b
      https://github.com/openvswitch/ovs/commit/abd7a457652e6734902720fe6a5dddb3fc0d1e3b
  Author: Flavio Leitner <fbl at sysclose.org>
  Date:   2021-02-10 (Wed, 10 Feb 2021)

  Changed paths:
    M lib/conntrack.c
    M lib/dp-packet.h
    M lib/flow.c
    M tests/classifier.at

  Log Message:
  -----------
  flow: Support extra padding length.

Although not required, padding can be optionally added until
the packet length is MTU bytes. A packet with extra padding
currently fails sanity checks.

Vulnerability: CVE-2020-35498
Fixes: fa8d9001a624 ("miniflow_extract: Properly handle small IP packets.")
Reported-by: Joakim Hindersson <joakim.hindersson at elastx.se>
Acked-by: Ilya Maximets <i.maximets at ovn.org>
Signed-off-by: Flavio Leitner <fbl at sysclose.org>
Signed-off-by: Ilya Maximets <i.maximets at ovn.org>




More information about the git mailing list