From: Ben Pfaff <blp@nicira.com>
Date: Wed, 4 Sep 2013 19:38:12 +0000 (-0700)
Subject: ofproto-dpif: Fix use-after-free deleting a bridge with active traffic.
X-Git-Tag: sliver-openvswitch-2.0.90-1~16^2~36
X-Git-Url: http://git.onelab.eu/?a=commitdiff_plain;h=1fe409d57f8f701278a709c608381d2dc1f71cfc;hp=1fe409d57f8f701278a709c608381d2dc1f71cfc;p=sliver-openvswitch.git

ofproto-dpif: Fix use-after-free deleting a bridge with active traffic.

When a bridge that has active traffic is deleted, the bridge's ofproto can
be referenced by in-flight "flow_miss"es.  This commit fixes the problem
by destroying "flow_miss"es that reference the ofproto that is being
deleted.

I found the problem by adding and removing a bridge that had active traffic
(via hping3) while running under valgrind.

Signed-off-by: Ben Pfaff <blp@nicira.com>
Acked-by: Ethan Jackson <ethan@nicira.com>
---