acl-plugin: tuplemerge: refresh the pointer to hash-readied ACL entries per each... 09/15309/1
authorAndrew Yourtchenko <ayourtch@gmail.com>
Tue, 16 Oct 2018 15:18:26 +0000 (17:18 +0200)
committerAndrew Yourtchenko <ayourtch@gmail.com>
Tue, 16 Oct 2018 15:18:26 +0000 (17:18 +0200)
A pointer to hash-ready ACL rules is only set once, which might cause a crash if there are colliding entries
from more than one ACL applied.

Solution: reload the pointer based on the element being processed.

Change-Id: I7a701c2c3b4236d67293159f2a33c4f967168953
Signed-off-by: Andrew Yourtchenko <ayourtch@gmail.com>
src/plugins/acl/hash_lookup.c

index c37aae4..0087a5e 100644 (file)
@@ -1487,6 +1487,8 @@ split_partition(acl_main_t *am, u32 first_index,
        int i=0;
        u64 collisions = vec_len(pae->colliding_rules);
        for(i=0; i<collisions; i++){
+                /* reload the hash acl info as it might be a different ACL# */
+               ha = vec_elt_at_index(am->hash_acl_infos, pae->acl_index);
 
                DBG( "TM-collision: base_ace:%d (ace_mask:%d, first_collision_mask:%d)",
                                pae->ace_index, pae->mask_type_index, coll_mask_type_index);