Code Review
/
vpp.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
review
|
tree
raw
|
inline
| side by side
reassembly: prevent long chain attack
[vpp.git]
/
src
/
vnet
/
ip
/
ip.api
diff --git
a/src/vnet/ip/ip.api
b/src/vnet/ip/ip.api
index
b67e2e5
..
afb0960
100644
(file)
--- a/
src/vnet/ip/ip.api
+++ b/
src/vnet/ip/ip.api
@@
-20,7
+20,7
@@
called through a shared memory interface.
*/
called through a shared memory interface.
*/
-option version = "2.0.
0
";
+option version = "2.0.
1
";
import "vnet/ip/ip_types.api";
import "vnet/fib/fib_types.api";
import "vnet/ethernet/ethernet_types.api";
import "vnet/ip/ip_types.api";
import "vnet/fib/fib_types.api";
import "vnet/ethernet/ethernet_types.api";
@@
-114,7
+114,6
@@
enum ip_neighbor_flags
IP_API_NEIGHBOR_FLAG_NONE = 0,
IP_API_NEIGHBOR_FLAG_STATIC = 0x1,
IP_API_NEIGHBOR_FLAG_NO_FIB_ENTRY = 0x2,
IP_API_NEIGHBOR_FLAG_NONE = 0,
IP_API_NEIGHBOR_FLAG_STATIC = 0x1,
IP_API_NEIGHBOR_FLAG_NO_FIB_ENTRY = 0x2,
- IP_API_NEIGHBOR_FLAG_FIX_ME_OLE = 0x3,
};
/** \brief IP neighbor
};
/** \brief IP neighbor
@@
-1086,6
+1085,7
@@
autoreply define ip_reassembly_set
u32 context;
u32 timeout_ms;
u32 max_reassemblies;
u32 context;
u32 timeout_ms;
u32 max_reassemblies;
+ u32 max_reassembly_length;
u32 expire_walk_interval_ms;
u8 is_ip6;
};
u32 expire_walk_interval_ms;
u8 is_ip6;
};
@@
-1103,6
+1103,7
@@
define ip_reassembly_get_reply
i32 retval;
u32 timeout_ms;
u32 max_reassemblies;
i32 retval;
u32 timeout_ms;
u32 max_reassemblies;
+ u32 max_reassembly_length;
u32 expire_walk_interval_ms;
u8 is_ip6;
};
u32 expire_walk_interval_ms;
u8 is_ip6;
};