On Wed, Dec 20, 2017 at 03:12:43PM -0800, Justin Pettit wrote: > > > > On Nov 27, 2017, at 9:20 AM, Ben Pfaff <[email protected]> wrote: > > > > These lines of code are intended to copy the 'next' and 'next_max' members > > of tbl[type] into local variables 'tbl' and 'max': > > tbl = tbl[type].next; > > max = tbl[type].next_max; > > They didn't do it properly because the first line changes 'tbl', so that > > the first and seconds lines' references to tbl[type] refer to different > > objects. > > > > This commit fixes the problem. > > > > Found by libfuzzer. > > > > Reported-by: Bhargava Shastry <[email protected]> > > Signed-off-by: Ben Pfaff <[email protected]> > > Acked-by: Justin Pettit <[email protected]>
Thanks. I applied this to master and backported as far as 2.4. _______________________________________________ dev mailing list [email protected] https://mail.openvswitch.org/mailman/listinfo/ovs-dev
