On Thu, Jan 31, 2019 at 1:17 PM Greg Rose <[email protected]> wrote:
>
> From: Ross Lagerwall <[email protected]>
>
> Upstream commit:
>     commit 04a4af334b971814eedf4e4a413343ad3287d9a9
>     Author: Ross Lagerwall <[email protected]>
>     Date:   Mon Jan 14 09:16:56 2019 +0000
>
>     openvswitch: Avoid OOB read when parsing flow nlattrs
>
>     For nested and variable attributes, the expected length of an attribute
>     is not known and marked by a negative number.  This results in an OOB
>     read when the expected length is later used to check if the attribute is
>     all zeros. Fix this by using the actual length of the attribute rather
>     than the expected length.
>
>     Signed-off-by: Ross Lagerwall <[email protected]>
>     Acked-by: Pravin B Shelar <[email protected]>
>     Signed-off-by: David S. Miller <[email protected]>
>
> Cc: Ross Lagerwall <[email protected]>
> Signed-off-by: Greg Rose <[email protected]>
> ---
Thanks for the backport.  I am good with the whole series.

Acked-by: Yi-Hung Wei <[email protected]>
_______________________________________________
dev mailing list
[email protected]
https://mail.openvswitch.org/mailman/listinfo/ovs-dev

Reply via email to