dpif: Use separate OVS_PACKET_ATTR_PROBE for packet messges
authorThomas Graf <tgraf@noironetworks.com>
Wed, 14 Jan 2015 23:17:31 +0000 (00:17 +0100)
committerThomas Graf <tgraf@noironetworks.com>
Wed, 14 Jan 2015 23:17:31 +0000 (00:17 +0100)
commit2e460098bff351b9fddcb917447caa3b97a35d86
tree7d86ff153b547c78ce2bfedee54285a94960d7b8
parentafc3987b514ded86a47d079239d57bfb0663801b
dpif: Use separate OVS_PACKET_ATTR_PROBE for packet messges

User space is currently sending a OVS_FLOW_ATTR_PROBE for both flow
and packet messages. This leads to an out-of-bounds access in
ovs_packet_cmd_execute() because OVS_FLOW_ATTR_PROBE >
OVS_PACKET_ATTR_MAX.

Introduce a new OVS_PACKET_ATTR_PROBE with the same numeric value
as OVS_FLOW_ATTR_PROBE to grow the range of accepted packet attributes
while maintaining binary compatibility with existing OVS binaries.

Fixes: 9233ce ("datapath: Add support for OVS_FLOW_ATTR_PROBE.")
Reported-by: Sander Eikelenboom <linux@eikelenboom.it>
Signed-off-by: Thomas Graf <tgraf@noironetworks.com>
Acked-by: Jesse Gross <jesse@nicira.com>
AUTHORS
datapath/datapath.c
datapath/linux/compat/include/linux/openvswitch.h
lib/dpif-netlink.c