These patches fix an assertion failure when very large (approximately 64
kB) packets are sent to userspace through a network device with a very
large MTU.  This bug was originally reported through the new security
vulnerability management process, but we decided during the process that
the severity was low enough not to warrant applying the full process.
(We don't think that 64 kB MTUs are common.)

These patches were reviewed as part of the security process, thus I
have already applied them to master.  I'll look at backporting in a
minute.

Ben Pfaff (2):
  netlink: Refine calculation of maximum-length attributes.
  dpif-netlink: Drop oversized packets instead of assert-failing.

 lib/dpif-netlink.c | 40 +++++++++++++++++++++++++++++-----------
 lib/netlink.c      |  6 +++---
 lib/netlink.h      | 11 +++++++++--
 3 files changed, 41 insertions(+), 16 deletions(-)

-- 
2.1.3

_______________________________________________
dev mailing list
dev@openvswitch.org
http://openvswitch.org/mailman/listinfo/dev

Reply via email to