I found this issue while surveying an oss-fuzz report, but I can't reason
out
whether this fix is related to that report.
An simple example will be set(encap(tunnel(geneve({{)))). When scan_geneve
returns, (struct geneve_scan *key)->len equals to 2*sizeof(struct
geneve_opt).
That seems not correct.
On Thu, Nov 1, 2018 at 8:08 AM Ben Pfaff <[email protected]> wrote:
> On Wed, Oct 31, 2018 at 06:43:24PM -0700, Yifeng Sun wrote:
> > This patch adds validation of close-braces in scan_geneve.
> >
> > In addition, SCAN_TYPE expects scan_XXX functions to return 0
> > on errors. This patch inspects all related scan_XXX functions
> > and fixes their return values.
> >
> > Signed-off-by: Yifeng Sun <[email protected]>
>
> Thanks a lot for fixing this code.
>
> Is this prompted by an oss-fuzz report? Do you have an example of input
> that it fixes?
>
> Thanks,
>
> Ben.
>
_______________________________________________
dev mailing list
[email protected]
https://mail.openvswitch.org/mailman/listinfo/ovs-dev