flow: Avoid assertion failure on invalid IPv6 packet.
authorJesse Gross <jesse@nicira.com>
Wed, 2 Mar 2011 01:56:01 +0000 (17:56 -0800)
committerJesse Gross <jesse@nicira.com>
Wed, 2 Mar 2011 23:53:11 +0000 (15:53 -0800)
commit46aef12ee5fcb028d20bac654c8a08cf993cfac8
tree2c14b327540934c8e1e991656b3205b8f2960906
parent0984253939b82ac1fecb22885f5486e9a840a578
flow: Avoid assertion failure on invalid IPv6 packet.

We compute the length of the IPv6 header by parsing all of the
extension headers that we know about.  However, the final result
is checked using ofpbuf_pull(), which checks the size with an
assertion.  Since the length of the final header is not checked
in any other way an invalid packet can trigger this assertion.
lib/flow.c