diff options
| author | Joe Stringer <joe@ovn.org> | 2016-05-16 20:08:01 -0700 |
|---|---|---|
| committer | Joe Stringer <joe@ovn.org> | 2016-05-23 18:06:59 -0700 |
| commit | b803e6ac63f03b53bc5d0c52634ea88f783d506f (patch) | |
| tree | 77a39921a45999f93c4bb525493454100f717ab9 /lib/netdev-native-tnl.h | |
| parent | 050c60bfb5b4bfb757284f5674904d6931f37269 (diff) | |
| download | openvswitch-b803e6ac63f03b53bc5d0c52634ea88f783d506f.tar.gz | |
upcall: Unregister dpif cbs in udpif_destroy().
During udpif_create(), we register callbacks for handling upcalls and
purging the datapath; however, in the corresponding udpif_destroy() we
never did this. This could potentially lead to dereference of
uninitialized memory in the userspace datapath if the main thread
destroys the udpif then executes an OpenFlow packet-out.
Fixes: e4e74c3a2b9a ("dpif-netdev: Purge all ukeys when reconfigure pmd.")
Fixes: 623540e4617e ("dpif-netdev: Streamline miss handling.")
Reported-by: William Tu <u9012063@gmail.com>
Signed-off-by: Joe Stringer <joe@ovn.org>
Acked-by: Ben Pfaff <blp@ovn.org>
Diffstat (limited to 'lib/netdev-native-tnl.h')
0 files changed, 0 insertions, 0 deletions