In function rte_pipeline_compute_masks(), the value pos equal
p->entries[i]->action,type constraint p->entries[i]->action is
[0,4],but array action_mask1 size is 4,it possible attempt to
access element 4 of array action_mask1.And also in function
rte_pipeline_run(),it possible attempt to access element 4 of
array action_mask0.

Signed-off-by: Rongqiang XIE <xie.rongqi...@zte.com.cn>
---
 lib/librte_pipeline/rte_pipeline.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/librte_pipeline/rte_pipeline.c 
b/lib/librte_pipeline/rte_pipeline.c
index 7f8fbac..2914445 100644
--- a/lib/librte_pipeline/rte_pipeline.c
+++ b/lib/librte_pipeline/rte_pipeline.c
@@ -155,8 +155,8 @@ struct rte_pipeline {
        /* Pipeline run structures */
        struct rte_mbuf *pkts[RTE_PORT_IN_BURST_SIZE_MAX];
        struct rte_pipeline_table_entry *entries[RTE_PORT_IN_BURST_SIZE_MAX];
-       uint64_t action_mask0[RTE_PIPELINE_ACTIONS];
-       uint64_t action_mask1[RTE_PIPELINE_ACTIONS];
+       uint64_t action_mask0[RTE_PIPELINE_ACTIONS + 1];
+       uint64_t action_mask1[RTE_PIPELINE_ACTIONS + 1];
        uint64_t pkts_mask;
        uint64_t n_pkts_ah_drop;
        uint64_t pkts_drop_mask;
-- 
1.8.3.1


Reply via email to