Re: [PATCHv2 net 1/3] openvswitch: Reject ct_state masks for unknown bits

2015-10-17 Thread Thomas Graf
On 10/16/15 at 11:08am, Joe Stringer wrote: > Currently, 0-bits are generated in ct_state where the bit position is > undefined, and matches are accepted on these bit-positions. If userspace > requests to match the 0-value for this bit then it may expect only a > subset of traffic to match this val

[PATCHv2 net 1/3] openvswitch: Reject ct_state masks for unknown bits

2015-10-16 Thread Joe Stringer
Currently, 0-bits are generated in ct_state where the bit position is undefined, and matches are accepted on these bit-positions. If userspace requests to match the 0-value for this bit then it may expect only a subset of traffic to match this value, whereas currently all packets will have this bit