git.proxmox.com Git - ovs.git/commit

author	Flavio Leitner <fbl@sysclose.org>
	Mon, 26 Oct 2020 19:03:19 +0000 (16:03 -0300)
committer	Ilya Maximets <i.maximets@ovn.org>
	Wed, 10 Feb 2021 14:02:03 +0000 (15:02 +0100)
commit	0625dc79aec73b966f206e55655a2816696246d0
tree	0c8539702c758a57e7a712a44008a6edce4ad496	tree
parent	c832b1a28ac05858f431d0a000a9fef9f3578c25	commit \| diff

flow: Support extra padding length.

Although not required, padding can be optionally added until
the packet length is MTU bytes. A packet with extra padding
currently fails sanity checks.

Vulnerability: CVE-2020-35498
Fixes: fa8d9001a624 ("miniflow_extract: Properly handle small IP packets.")
Reported-by: Joakim Hindersson <joakim.hindersson@elastx.se>
Acked-by: Ilya Maximets <i.maximets@ovn.org>
Signed-off-by: Flavio Leitner <fbl@sysclose.org>
Signed-off-by: Ilya Maximets <i.maximets@ovn.org>

lib/conntrack.c		diff \| blob \| blame \| history
lib/dp-packet.h		diff \| blob \| blame \| history
lib/flow.c		diff \| blob \| blame \| history
tests/classifier.at		diff \| blob \| blame \| history