Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix validation for ICMP type and code in backend rules. #652

Merged
merged 1 commit into from
Nov 6, 2017

Conversation

fasaxc
Copy link
Member

@fasaxc fasaxc commented Nov 6, 2017

Description

  • 0 (ping reply) should have been allowed.
  • 255 (unused) should have been foridden due to lack of kernel support.

Frontend API models were already correct.

Fixes the validation part of https://github.com/projectcalico/felix/issues/1604

Todos

  • Tests
  • Documentation
  • Release note

Release Note

Fix incorrect validation of ICMP type to allow 0, which is a valid value.

- 0 (ping reply) should have been allowed.
- 255 (unused) should have been foridden due to lack of kernel support.
@caseydavenport
Copy link
Member

@fasaxc does this need to go into v2.x as well?

@fasaxc
Copy link
Member Author

fasaxc commented Nov 6, 2017

@caseydavenport Yes, it probably should: #654

@fasaxc fasaxc merged commit 4a01a23 into projectcalico:master Nov 6, 2017
@fasaxc fasaxc deleted the icmp-validation branch November 6, 2017 18:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants