On 7/16/22 08:45, Lorenzo Bianconi wrote: > ofpbuf_put_zeros routine can rellocate the buffer if the requested size > is bigger than buffer tailroom. Reload ol pointer before running > ofpact_finish_LEARN in order to avoid a possible use-after-free in > add_lb_vip_hairpin_reply_action routine. > > Fixes: 022ea339c8 ("lflow: Use learn() action to generate LB hairpin reply > flows.") > Signed-off-by: Lorenzo Bianconi <lorenzo.bianc...@redhat.com> > --- > Changes since v1: > - rely on ofpbuf_at_assert in order to not overwrite possible former actions > ---
Looks good to me, thanks! Acked-by: Dumitru Ceara <dce...@redhat.com> _______________________________________________ dev mailing list d...@openvswitch.org https://mail.openvswitch.org/mailman/listinfo/ovs-dev