openvswitch: Reject ct_state masks for unknown bits
authorJoe Stringer <joestringer@nicira.com>
Tue, 20 Oct 2015 02:18:57 +0000 (19:18 -0700)
committerDavid S. Miller <davem@davemloft.net>
Thu, 22 Oct 2015 02:33:36 +0000 (19:33 -0700)
commit9e384715e9e702704c6941c575f0e6b322132a3a
tree741598dfa595f35401834726175acb64d3461191
parente2e8009ff72ad2a795b67785f3238af152146368
openvswitch: Reject ct_state masks for unknown bits

Currently, 0-bits are generated in ct_state where the bit position is
undefined, and matches are accepted on these bit-positions. If userspace
requests to match the 0-value for this bit then it may expect only a
subset of traffic to match this value, whereas currently all packets
will have this bit set to 0. Fix this by rejecting such masks.

Signed-off-by: Joe Stringer <joestringer@nicira.com>
Acked-by: Pravin B Shelar <pshelar@nicira.com>
Acked-by: Thomas Graf <tgraf@suug.ch>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/openvswitch/conntrack.h
net/openvswitch/flow_netlink.c