| commit | bf32fecdc1851ad9ca960f56771b798d17c26cf1 | [log] [tgz] |
|---|---|---|
| author | Jesse Gross <jesse@nicira.com> | Mon Apr 02 14:26:27 2012 -0700 |
| committer | Jesse Gross <jesse@nicira.com> | Mon Apr 02 14:28:57 2012 -0700 |
| tree | 039b57775613b56c84d2651071cfb7cc8cd536cf | |
| parent | dd775ae2549217d3ae09363e3edb305d0fa19928 [diff] |
openvswitch: Add length check when retrieving TCP flags. When collecting TCP flags we check that the IP header indicates that a TCP header is present but not that the packet is actually long enough to contain the header. This adds a check to prevent reading off the end of the packet. In practice, this is only likely to result in reading of bad data and not a crash due to the presence of struct skb_shared_info at the end of the packet. Signed-off-by: Jesse Gross <jesse@nicira.com>