mirror of
https://github.com/openvswitch/ovs
synced 2025-08-22 01:51:26 +00:00
8c506d3725
nx_to_ofp_flow_update_event() aborts the execution if incorrect
event is passed, so checking has to be done before conversion
in order to avoid the crash while decoding malformed flow update
message:
==397030==ERROR: AddressSanitizer: ABRT on unknown address 0x... )
0 0x7fd26688418b in raise
1 0x7fd266863858 in abort
2 0x6a6cbd in nx_to_ofp_flow_update_event lib/ofp-monitor.c:399:9
3 0x6a6cbd in ofputil_decode_flow_update lib/ofp-monitor.c:856:25
4 0x56491d in ofp_print_flow_monitor_reply lib/ofp-print.c:779:22
5 0x55f0a0 in ofp_to_string__ lib/ofp-print.c:1154:16
6 0x55f0a0 in ofp_to_string lib/ofp-print.c:1244:21
7 0x5603a5 in ofp_print lib/ofp-print.c:1288:28
Credit to OSS-Fuzz.
Additionally removed the extra 'reply' word from the error message,
since ofpraw_get_name(raw) already has one.
Fixes: c3e64047d1cc ("ofp-monitor: Support flow monitoring for OpenFlow 1.3, 1.4+.")
Reported-at: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47112
Acked-by: Aaron Conole <aconole@redhat.com>
Signed-off-by: Ilya Maximets <i.maximets@ovn.org>
26 lines
1.4 KiB
Plaintext
26 lines
1.4 KiB
Plaintext
TEST_FUZZ_REGRESSION([flow_extract_fuzzer-5112775280951296])
|
|
TEST_FUZZ_REGRESSION([flow_extract_fuzzer-5457710546944000])
|
|
TEST_FUZZ_REGRESSION([json_parser_fuzzer-4790908707930112])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-4584019764183040])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-4671928750702592])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-4730143510626304])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-4854119633256448])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-5070973479944192])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-5072291707748352])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-5147430386401280])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-5168455220199424])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-5190507327127552])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-5204186701496320])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-5394482341085184])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-5395207246839808])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-5647458888581120])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-5674119268925440])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-5674419757252608])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-5677588436484096])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-5706562554298368])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-5722747668791296])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-6285128790704128])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-6470117922701312])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-6502620041576448])
|
|
TEST_FUZZ_REGRESSION([ofp_print_fuzzer-6540965472632832])
|