On 7/16/22 08:45, Lorenzo Bianconi wrote:
> ofpbuf_put_zeros routine can rellocate the buffer if the requested size
> is bigger than buffer tailroom. Reload ol pointer before running
> ofpact_finish_LEARN in order to avoid a possible use-after-free in
> add_lb_vip_hairpin_reply_action routine.
>
> Fixes: 022ea339c8 ("lflow: Use learn() action to generate LB hairpin reply
> flows.")
> Signed-off-by: Lorenzo Bianconi <[email protected]>
> ---
> Changes since v1:
> - rely on ofpbuf_at_assert in order to not overwrite possible former actions
> ---
Looks good to me, thanks!
Acked-by: Dumitru Ceara <[email protected]>
_______________________________________________
dev mailing list
[email protected]
https://mail.openvswitch.org/mailman/listinfo/ovs-dev
