[dpdk-dev] [PATCH v4] rib: fix max depth IPv6 lookup

David Marchand david.marchand at redhat.com
Thu Jun 24 15:23:24 CEST 2021


On Wed, Jun 23, 2021 at 5:17 PM <ohilyard at iol.unh.edu> wrote:
>
> From: Owen Hilyard <ohilyard at iol.unh.edu>
>
> ASAN found a stack buffer overflow in lib/rib/rte_rib6.c:get_dir.
> The fix for the stack buffer overflow was to make sure depth
> was always < 128, since when depth = 128 it caused the index
> into the ip address to be 16, which read off the end of the array.
>
> While trying to solve the buffer overflow, I noticed that a few
> changes could be made to remove the for loop entirely.
>
> Fixes: f7e861e21c ("rib: support IPv6")
Updated sha1.
Cc: stable at dpdk.org

>
> Signed-off-by: Owen Hilyard <ohilyard at iol.unh.edu>
Acked-by: Vladimir Medvedkin <vladimir.medvedkin at intel.com>

Applied, thanks.


-- 
David Marchand



More information about the dev mailing list