On Mon, Jul 18, 2022 at 6:48 AM Dumitru Ceara <[email protected]> wrote: > > On 7/16/22 08:45, Lorenzo Bianconi wrote: > > ofpbuf_put_zeros routine can rellocate the buffer if the requested size > > is bigger than buffer tailroom. Reload ol pointer before running > > ofpact_finish_LEARN in order to avoid a possible use-after-free in > > add_lb_vip_hairpin_reply_action routine. > > > > Fixes: 022ea339c8 ("lflow: Use learn() action to generate LB hairpin reply > > flows.") > > Signed-off-by: Lorenzo Bianconi <[email protected]> > > --- > > Changes since v1: > > - rely on ofpbuf_at_assert in order to not overwrite possible former actions > > --- > > Looks good to me, thanks! > > Acked-by: Dumitru Ceara <[email protected]> >
Thanks. I applied this patch to the main branch and backported to branch-22.06. I will be backporting to branch-22.03 soon (running tests). Numan > _______________________________________________ > dev mailing list > [email protected] > https://mail.openvswitch.org/mailman/listinfo/ovs-dev > _______________________________________________ dev mailing list [email protected] https://mail.openvswitch.org/mailman/listinfo/ovs-dev
