Discussion:
[ovs-discuss] The function compose_output_action__ has a serious bug
Wangyong
2014-10-12 22:23:13 UTC
Permalink
Dear all,
I'think the function compose_output_action__ has a serious bug.

When the host A has to virtual machine VMa and VMb. if huge traffic from VMa to VMb, then offline
the VMb, and this function enter the first condition. so the action length is zero. so when return, the
OVS will generate a DROP flow entry to the datapath.
if (!xport) {
xlate_report(ctx, "Nonexistent output port");
return;
} else if (xport->config & OFPUTIL_PC_NO_FWD) {
-------------------------------------------------------------------------------------------------------------------------------------
????????????????????????????????????????
????????????????????????????????????????
????????????????????????????????????????
???
This e-mail and its attachments contain confidential information from H3C, which is
intended only for the person or entity whose address is listed above. Any use of the
information contained herein in any way (including, but not limited to, total or partial
disclosure, reproduction, or dissemination) by persons other than the intended
recipient(s) is prohibited. If you receive this e-mail in error, please notify the sender
by phone or email immediately and delete it!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://openvswitch.org/pipermail/discuss/attachments/20141012/66cec6df/attachment.html>
Wangyong
2014-10-12 22:24:08 UTC
Permalink
Dear all,
I'think the function compose_output_action__ has a serious bug.

When the host A has to virtual machine VMa and VMb. if huge traffic from VMa to VMb, then offline
the VMb, and this function enter the first condition. so the action length is zero. so when return, the
OVS will generate a DROP flow entry to the datapath.
if (!xport) {
xlate_report(ctx, "Nonexistent output port");
return;
} else if (xport->config & OFPUTIL_PC_NO_FWD) {
-------------------------------------------------------------------------------------------------------------------------------------
????????????????????????????????????????
????????????????????????????????????????
????????????????????????????????????????
???
This e-mail and its attachments contain confidential information from H3C, which is
intended only for the person or entity whose address is listed above. Any use of the
information contained herein in any way (including, but not limited to, total or partial
disclosure, reproduction, or dissemination) by persons other than the intended
recipient(s) is prohibited. If you receive this e-mail in error, please notify the sender
by phone or email immediately and delete it!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://openvswitch.org/pipermail/discuss/attachments/20141012/5fffa0f1/attachment.html>
Ben Pfaff
2014-10-12 22:34:28 UTC
Permalink
Post by Wangyong
I'think the function compose_output_action__ has a serious bug.
When the host A has to virtual machine VMa and VMb. if huge traffic from VMa to VMb, then offline
the VMb, and this function enter the first condition. so the action length is zero. so when return, the
OVS will generate a DROP flow entry to the datapath.
if (!xport) {
xlate_report(ctx, "Nonexistent output port");
return;
} else if (xport->config & OFPUTIL_PC_NO_FWD) {
If there's no place to send the data, it has to be dropped. That's what
that condition is checking for.

Loading...