linux/net/openvswitch
Jesse Gross 4185392da4 openvswitch: Relax set header validation.
When installing a flow with an action to set a particular field we
need to validate that the packets that are part of the flow actually
contain that header.  With IP we use zeroed addresses and with TCP/UDP
the check is for zeroed ports.  This check is overly broad and can catch
packets like DHCP requests that have a zero source address in a
legitimate header.  This changes the check to look for a zeroed protocol
number for IP or for both ports be zero for TCP/UDP before considering
the header to not exist.

Reported-by: Ethan Jackson <ethan@nicira.com>
Signed-off-by: Jesse Gross <jesse@nicira.com>
2012-08-06 15:49:47 -07:00
..
actions.c Revert "openvswitch: potential NULL deref in sample()" 2012-07-27 13:45:51 -07:00
datapath.c openvswitch: Relax set header validation. 2012-08-06 15:49:47 -07:00
datapath.h openvswitch: Replace Nicira Networks. 2012-05-03 18:55:23 -07:00
dp_notify.c openvswitch: Replace Nicira Networks. 2012-05-03 18:55:23 -07:00
flow.c Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/jesse/openvswitch 2012-07-20 16:16:34 -07:00
flow.h openvswitch: Replace Nicira Networks. 2012-05-03 18:55:23 -07:00
Kconfig
Makefile
vport-internal_dev.c openvswitch: Reset upper layer protocol info on internal devices. 2012-05-25 11:29:30 -07:00
vport-internal_dev.h openvswitch: Replace Nicira Networks. 2012-05-03 18:55:23 -07:00
vport-netdev.c Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/jesse/openvswitch 2012-07-20 16:16:34 -07:00
vport-netdev.h openvswitch: Replace Nicira Networks. 2012-05-03 18:55:23 -07:00
vport.c openvswitch: Replace Nicira Networks. 2012-05-03 18:55:23 -07:00
vport.h openvswitch: Replace Nicira Networks. 2012-05-03 18:55:23 -07:00