tree 741598dfa595f35401834726175acb64d3461191
parent e2e8009ff72ad2a795b67785f3238af152146368
author Joe Stringer <joestringer@nicira.com> 1445307537 -0700
committer David S. Miller <davem@davemloft.net> 1445481216 -0700

openvswitch: Reject ct_state masks for unknown bits

Currently, 0-bits are generated in ct_state where the bit position is
undefined, and matches are accepted on these bit-positions. If userspace
requests to match the 0-value for this bit then it may expect only a
subset of traffic to match this value, whereas currently all packets
will have this bit set to 0. Fix this by rejecting such masks.

Signed-off-by: Joe Stringer <joestringer@nicira.com>
Acked-by: Pravin B Shelar <pshelar@nicira.com>
Acked-by: Thomas Graf <tgraf@suug.ch>
Signed-off-by: David S. Miller <davem@davemloft.net>