From: Tom Herbert <t...@quantonium.net> Date: Fri, 1 Sep 2017 14:04:10 -0700
> This patch set fixes some basic issues with __skb_flow_dissect function. > > Items addressed: > - Cleanup control flow in the function; in particular eliminate a > bunch of goto's and implement a simplified control flow model > - Add limits for number of encapsulations and headers that can be > dissected > > v2: > - Simplify the logic for limits on flow dissection. Just set the > limit based on the number of headers the flow dissector can > processes. The accounted headers includes encapsulation headers, > extension headers, or other shim headers. > > Tested: > > Ran normal traffic, GUE, and VXLAN traffic. Applied, thanks Tom.