search

OpenFastPath / ofp

OpenFastPath project
BSD 3-Clause "New" or "Revised" License
349 stars 126 forks source link

ofp crash when processing fragment IP packet #264

Closed QinLongFei closed 3 years ago

QinLongFei commented 3 years ago

OFP has bad behaviour when processing fragment IP packet. There is a double free for odp_packet_t.

After debuging, If found the first free happened on ofp_ip_reass .

image

And the second free happened again on ofp_packet_input. image

Any one has similar issue?

bogdanPricope commented 3 years ago

No idea, yet, I may have a different code version. Is it the last received fragment of the packet? Is always reproducible?

QinLongFei commented 3 years ago

This crash was fixed with this patch. https://github.com/OpenFastPath/ofp/commit/51312a31aa4d176c6bec2cf0310e1a01d3a880c8#diff-9cb1f59bdc721588e2da052358670e3bdc6b911f3ea66ce422f3d62bc4c3e025

Close it. Thanks