]> git.proxmox.com Git - mirror_ovs.git/commit - lib/conntrack.c
conntrack: Enforce conn_type for flush tuple.
authorDarrell Ball <dlu998@gmail.com>
Mon, 17 Dec 2018 22:43:13 +0000 (14:43 -0800)
committerBen Pfaff <blp@ovn.org>
Tue, 18 Dec 2018 22:12:50 +0000 (14:12 -0800)
commita1d5eeff7c5375925f549426d8a36b02f575da2c
tree538e43e399074996839ae87fcbd7f26f2d73d1ab
parent8417e688bc3ca05247befb9ab00a6b98f2e4d9de
conntrack: Enforce conn_type for flush tuple.

The user should only reference a conntrack entry by the forward
direction context, as per 'conntrack_flush()', enforce this by
checking for 'default' conn_type.  The likelihood of a user
not using the original tuple is low, but it should be guarded
against, logged and documented.

Signed-off-by: Darrell Ball <dlu998@gmail.com>
Signed-off-by: Ben Pfaff <blp@ovn.org>
lib/conntrack.c
lib/dpctl.man