These patches fix an assertion failure when very large (approximately 64 kB) packets are sent to userspace through a network device with a very large MTU. This bug was originally reported through the new security vulnerability management process, but we decided during the process that the severity was low enough not to warrant applying the full process. (We don't think that 64 kB MTUs are common.)
These patches were reviewed as part of the security process, thus I have already applied them to master. I'll look at backporting in a minute. Ben Pfaff (2): netlink: Refine calculation of maximum-length attributes. dpif-netlink: Drop oversized packets instead of assert-failing. lib/dpif-netlink.c | 40 +++++++++++++++++++++++++++++----------- lib/netlink.c | 6 +++--- lib/netlink.h | 11 +++++++++-- 3 files changed, 41 insertions(+), 16 deletions(-) -- 2.1.3 _______________________________________________ dev mailing list dev@openvswitch.org http://openvswitch.org/mailman/listinfo/dev