Re: [ovs-dev] [PATCH 2/4] ofp-actions: Fix use-after-free in bundle action.

2016-03-05 Thread Joe Stringer
On 5 March 2016 at 09:13, William Tu wrote: > Hi Joe, > > On Thu, Mar 3, 2016 at 12:22 AM, Joe Stringer wrote: >> >> If the actions list in an incoming flow mod is long enough, and there is >> a bundle() action with 3 or more slaves, then it is possible for a >> index ae961f6cc5bb..fe1424f137a1 1

Re: [ovs-dev] [PATCH 2/4] ofp-actions: Fix use-after-free in bundle action.

2016-03-05 Thread William Tu
Hi Joe, On Thu, Mar 3, 2016 at 12:22 AM, Joe Stringer wrote: > If the actions list in an incoming flow mod is long enough, and there is > a bundle() action with 3 or more slaves, then it is possible for a > index ae961f6cc5bb..fe1424f137a1 100644 > --- a/lib/ofp-actions.c > +++ b/lib/ofp-actions

Re: [ovs-dev] [PATCH 2/4] ofp-actions: Fix use-after-free in bundle action.

2016-03-03 Thread Joe Stringer
On 3 March 2016 at 00:22, Joe Stringer wrote: > If the actions list in an incoming flow mod is long enough, and there is > a bundle() action with 3 or more slaves, then it is possible for a > reallocation to occur after placing the ofpact_bundle into the ofpacts > buffer, while appending all of th

[ovs-dev] [PATCH 2/4] ofp-actions: Fix use-after-free in bundle action.

2016-03-03 Thread Joe Stringer
If the actions list in an incoming flow mod is long enough, and there is a bundle() action with 3 or more slaves, then it is possible for a reallocation to occur after placing the ofpact_bundle into the ofpacts buffer, while appending all of the slaves into the buffer. If the buffer freed by this r