diff options
| author | Thomas Graf <tgraf@suug.ch> | 2015-01-14 13:56:19 +0000 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2015-01-14 16:49:44 -0500 |
| commit | 1ba398041f5b5a15456ea20a9ba3ff80b6a4e7d1 (patch) | |
| tree | 11d8bc5cd83cdad417a1c4d5863a756023480f1d /include/uapi/linux/openvswitch.h | |
| parent | 776d4e9f5c0229037707f692b386b1f2a5bac054 (diff) | |
| download | linux-riscv-1ba398041f5b5a15456ea20a9ba3ff80b6a4e7d1.tar.gz linux-riscv-1ba398041f5b5a15456ea20a9ba3ff80b6a4e7d1.tar.bz2 linux-riscv-1ba398041f5b5a15456ea20a9ba3ff80b6a4e7d1.zip | |
openvswitch: packet messages need their own probe attribtue
User space is currently sending a OVS_FLOW_ATTR_PROBE for both flow
and packet messages. This leads to an out-of-bounds access in
ovs_packet_cmd_execute() because OVS_FLOW_ATTR_PROBE >
OVS_PACKET_ATTR_MAX.
Introduce a new OVS_PACKET_ATTR_PROBE with the same numeric value
as OVS_FLOW_ATTR_PROBE to grow the range of accepted packet attributes
while maintaining to be binary compatible with existing OVS binaries.
Fixes: 05da589 ("openvswitch: Add support for OVS_FLOW_ATTR_PROBE.")
Reported-by: Sander Eikelenboom <linux@eikelenboom.it>
Tracked-down-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Thomas Graf <tgraf@suug.ch>
Reviewed-by: Jesse Gross <jesse@nicira.com>
Acked-by: Pravin B Shelar <pshelar@nicira.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include/uapi/linux/openvswitch.h')
| -rw-r--r-- | include/uapi/linux/openvswitch.h | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/include/uapi/linux/openvswitch.h b/include/uapi/linux/openvswitch.h index 3a6dcaa359b7..f714e8633352 100644 --- a/include/uapi/linux/openvswitch.h +++ b/include/uapi/linux/openvswitch.h @@ -174,6 +174,10 @@ enum ovs_packet_attr { OVS_PACKET_ATTR_USERDATA, /* OVS_ACTION_ATTR_USERSPACE arg. */ OVS_PACKET_ATTR_EGRESS_TUN_KEY, /* Nested OVS_TUNNEL_KEY_ATTR_* attributes. */ + OVS_PACKET_ATTR_UNUSED1, + OVS_PACKET_ATTR_UNUSED2, + OVS_PACKET_ATTR_PROBE, /* Packet operation is a feature probe, + error logging should be suppressed. */ __OVS_PACKET_ATTR_MAX }; |