From e7e2b9bcc0a0b941b71d9898875ff4d5572c5eaf Mon Sep 17 00:00:00 2001 From: Ben Pfaff Date: Mon, 9 Mar 2009 11:07:06 -0700 Subject: [PATCH] secchan: Retain original input port for NXAST_RESUBMIT action. The NXAST_RESUBMIT action causes a secondary lookup in the flow table with a different input port value. However, we want to retain the original input port for processing the result of that secondary lookup. Otherwise, output to OFPP_IN_PORT will send the packet to the wrong port, and output to the input port without specifying OFPP_IN_PORT will be mistakenly allowed. --- secchan/ofproto.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/secchan/ofproto.c b/secchan/ofproto.c index ccf4e40a..5b0c5044 100644 --- a/secchan/ofproto.c +++ b/secchan/ofproto.c @@ -1447,7 +1447,7 @@ xlate_table_action(const struct action_xlate_ctx *ctx, uint16_t in_port) nested_ctx.in = rule->actions; nested_ctx.n_in = rule->n_actions; - nested_ctx.flow = &flow; + nested_ctx.flow = ctx->flow; nested_ctx.ofproto = NULL; /* Prevent recursion. */ nested_ctx.out = ctx->out; do_xlate_actions(&nested_ctx); -- 2.30.2