Version 4: - Cover case where tcp_hdrlen > tcp_pkt_size - Other small adjustments
ovs may install bad datapath flow when meet malformed pkts. As a result, it may allows some unwanted pkts pass. This could be a point of attack. lic121 (3): upcall: prevent from installing flows when inconsistence tests: fix packet data endianness upcall: considering dataofs when parsing tcp pkt lib/flow.c | 20 ++++++++++------- ofproto/ofproto-dpif-upcall.c | 26 +++++++++++++++++++--- tests/flowgen.py | 2 +- tests/ofproto-dpif.at | 50 +++++++++++++++++++++++++++++++++++++++++++ 4 files changed, 86 insertions(+), 12 deletions(-) -- 1.8.3.1 _______________________________________________ dev mailing list [email protected] https://mail.openvswitch.org/mailman/listinfo/ovs-dev
