gbp: enforce same endpoint mac and ip src 23/20323/3
authorBenoît Ganne <bganne@cisco.com>
Thu, 6 Jun 2019 15:53:21 +0000 (17:53 +0200)
committerNeale Ranns <nranns@cisco.com>
Wed, 26 Jun 2019 11:37:24 +0000 (11:37 +0000)
commitc47b97ddacc35cb10e4a2b0dcfff3e690ec5bf76
tree54795991d95324283fff26ba91eda78c2fe64adb
parentab05508e1eb96749b68de8ccd2f6f88ff3e64fad
gbp: enforce same endpoint mac and ip src

During packet classification, make sure packets coming from an EP also
matches this specific EP IP address and vice-versa. This prevents and EP
to send a packet on behalf of another EP.

Type: fix

Change-Id: I30287644ec73b90d9b6913952a82b2baedf6a5ff
Signed-off-by: Benoît Ganne <bganne@cisco.com>
src/plugins/gbp/gbp_classify_node.c
test/test_gbp.py