1. 02 Apr, 2012 1 commit
    • Jesse Gross's avatar
      openvswitch: Add length check when retrieving TCP flags. · bf32fecd
      Jesse Gross authored
      When collecting TCP flags we check that the IP header indicates that
      a TCP header is present but not that the packet is actually long
      enough to contain the header.  This adds a check to prevent reading
      off the end of the packet.
      
      In practice, this is only likely to result in reading of bad data and
      not a crash due to the presence of struct skb_shared_info at the end
      of the packet.
      Signed-off-by: default avatarJesse Gross <jesse@nicira.com>
      bf32fecd
  2. 31 Mar, 2012 39 commits