I'm really suspicious about the code in lib/skiplist.c, because I noticed that it writes, but never reads, the 'height' member of struct skiplist_node. I suspect that, therefore, in some circumstances the code can read past the end of the 'forward' array in skiplist_node.
I'd appreciate it if someone out there has time to verify that I'm right or I'm wrong. Thanks, Ben. _______________________________________________ dev mailing list [email protected] https://mail.openvswitch.org/mailman/listinfo/ovs-dev
