{"push_id":763539850,"size":1000,"distinct_size":1458,"ref":"refs/heads/master","head":"45f98d4cf831d795fe2a8f3e6a96b028b5617db6","before":"eb391b76aff9639547312ab93bdac9cc2e76c119","commits":[{"sha":"128f4e3f14171cacd227c1389e034a6db0cc9363","author":{"email":"eba59be6f07811efcfb9b9013eddeb3628e492b2@nicira.com","name":"Andy Zhou"},"message":"test: capture ping output into a file\n\nThe ping output can be useful. There is no down side in saving it.\n\nSigned-off-by: Andy Zhou <azhou@nicira.com>\nSigned-off-by: Joe Stringer <joestringer@nicira.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/128f4e3f14171cacd227c1389e034a6db0cc9363"},{"sha":"b7ca9d0c420a4d40f251bf08e17a5dd13d8e7ba9","author":{"email":"eba59be6f07811efcfb9b9013eddeb3628e492b2@nicira.com","name":"Andy Zhou"},"message":"test: remove openvswitch kernel module on test failure\n\nImprove test failure handling.\n\nSigned-off-by: Andy Zhou <azhou@nicira.com>\nSigned-off-by: Joe Stringer <joestringer@nicira.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/b7ca9d0c420a4d40f251bf08e17a5dd13d8e7ba9"},{"sha":"9ba4f3c5ceacecf8106a48262beb51946b88ef90","author":{"email":"68c46a606457643eab92053c1c05574abb26f861@koelker.net","name":"Jason Kölker"},"message":"XenServer: PEP8 Cleanup for openvswitch-cfg-update\n\nSigned-off-by: Jason Kölker <jason@koelker.net>\nSigned-off-by: Ben Pfaff <blp@nicira.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/9ba4f3c5ceacecf8106a48262beb51946b88ef90"},{"sha":"032c09ddd1052fc3e23a76418b77214a1a585009","author":{"email":"68c46a606457643eab92053c1c05574abb26f861@koelker.net","name":"Jason Kölker"},"message":"XenServer: Don't reset on xe-toolstack-restart\n\nWith XenServer only 1 manager is configured in the pool, which may not\nbe the first manager returned from `get-manager` as it returns in\nlexicographical order.\n\nSigned-off-by: Jason Kölker <jason@koelker.net>\nSigned-off-by: Ben Pfaff <blp@nicira.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/032c09ddd1052fc3e23a76418b77214a1a585009"},{"sha":"029ca940d7c552e23f0312095e21add06015a1f8","author":{"email":"440c109a8f67b6bb438c7a645596c4185b792b55@radisys.com","name":"Shu Shen"},"message":"ofproto: add support of OFPR_ACTION_SET as packet-in reason for OF1.4+\n\nThis patch adds support for OFPR_ACTION_SET as the packet-in reason when\na Packet-In message is triggered by an output action within an\naction-set. By default reason code OFPR_ACTION_SET is enabled for async\nmessages when Openflow 1.4+ is used. A test case is included.\n\nSigned-off-by: Shu Shen <shu.shen@radisys.com>\nSigned-off-by: Ben Pfaff <blp@nicira.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/029ca940d7c552e23f0312095e21add06015a1f8"},{"sha":"9ba56eda545bebc1604f189d9eb51187647f7acf","author":{"email":"eba59be6f07811efcfb9b9013eddeb3628e492b2@nicira.com","name":"Andy Zhou"},"message":"test: Reverse the order of commands added by ON_EXIT macro\n\nExecuting clean-up commands in the reverse order of their addition\nseems to be better for most of the cleanup situations. For example,\nin kmod tests, we should remove name spaces before remove kernel\nmodules.\n\nSigned-off-by: Andy Zhou <azhou@nicira.com>\nAcked-by: Ben Pfaff <blp@nicira.comugi","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/9ba56eda545bebc1604f189d9eb51187647f7acf"},{"sha":"9f33d4428c6fe1ab5670f3116c53eb00646f0f9a","author":{"email":"eba59be6f07811efcfb9b9013eddeb3628e492b2@nicira.com","name":"Andy Zhou"},"message":"test: Hide the name space clean up inside ADD_NAMESPACE macro\n\nTo reduce the complexity of writing kmod tests.\n\nSuggested-by: Joe Stringer <joestringer@nicira.com>\nSigned-off-by: Andy Zhou <azhou@nicira.com>\nAcked-by: Ben Pfaff <blp@nicira.comugi","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/9f33d4428c6fe1ab5670f3116c53eb00646f0f9a"},{"sha":"abb5943dbb8005a9de59c68e4d798fbd072d33f0","author":{"email":"925ddebbe7c6d24343c181589cf0c4e553cb1c68@nicira.com","name":"Alex Wang"},"message":"netdev-dpdk: Allow changing NON_PMD_CORE_ID for testing purpose.\n\nFor testing purpose, developers may want to change the NON_PMD_CORE_ID\nand use a different core for non-pmd threads.  Since the netdev-dpdk\nmodule is hard-coded to assert the non-pmd threads using core 0, such\nchange will cause abortion of OVS.\n\nThis commit fixes the assertion and allows changing NON_PMD_CORE_ID.\n\nSigned-off-by: Alex Wang <alexw@nicira.com>\nAcked-by: Pravin B Shelar <pshelar@nicira.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/abb5943dbb8005a9de59c68e4d798fbd072d33f0"},{"sha":"653ce9d6848c34aa1722d0ef4ddc6d8bd9ea2088","author":{"email":"6f50513b21952446fbc8c95a8f361b7aa434b7c7@nicira.com","name":"Ben Pfaff"},"message":"timeval: Correctly report usage statistics in log_poll_interval().\n\nMost of the information that timeval was reporting for long poll intervals\nwas comparing per-thread with per-process statistics, which yielded\nnonsense a lot of the time.\n\nSigned-off-by: Ben Pfaff <blp@nicira.com>\nAcked-by: Alex Wang <alexw@nicira.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/653ce9d6848c34aa1722d0ef4ddc6d8bd9ea2088"},{"sha":"05082734f3dfc185c56a42d30b670e13e0178114","author":{"email":"c4089df073b4e0e1342dd7f47682381cc38caa5c@nicira.com","name":"Gurucharan Shetty"},"message":"daemon.at: Fix a race condition with windows service test.\n\nOVS daemon service for Windows creates the pidfile and then\nregisters with the Windows services manager that the service\nis running. There is a small time gap between the two steps.\nSo retry a few times in the test.\n\nAlso, provide a keyword for the test.\n\nReported-by: Nithin Raju <nithin@vmware.com>\nSigned-off-by: Gurucharan Shetty <gshetty@nicira.com>\nAcked-by: Nithin Raju <nithin@vmware.com>\nTested-by: Nithin Raju <nithin@vmware.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/05082734f3dfc185c56a42d30b670e13e0178114"},{"sha":"99970e95bc827323ad9b9cfb326f2204b76300d8","author":{"email":"8e017de300aa8a1b37b30790baf6083b1587a4e9@vmware.com","name":"Nithin Raju"},"message":"lib/util.h: use types compatible with DWORD\n\n_BitScanForward() and friends are part of the Windows API and\ntake DWORD as parameter type. DWORD is defined to be 'unsigned long'\nin Windows' header files.\n\nWe call into these functions from within lib/util.h. Currently, we\npass arguments of type uint32_t which is type defined to\n'unsigned int'. This incompatiblity causes failures when we compile\nthe code as C++ code or with warnings enabled, when compiled as C\ncode.\n\nThe fix is to use 'unsigned long' rather than fixed size type.\n\nCo-Authored-by: Linda Sun <lsun@vmware.com>\nSigned-off-by: Nithin Raju <nithin@vmware.com>\nSigned-off-by: Linda Sun <lsun@vmware.com>\nSigned-off-by: Gurucharan Shetty <gshetty@nicira.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/99970e95bc827323ad9b9cfb326f2204b76300d8"},{"sha":"f1063b759fba1ece26dbd55e678f66c3caf59ed5","author":{"email":"17c2d8920621522552b392f72d8fdb4d1e866b44@noironetworks.com","name":"Thomas Graf"},"message":"datapath: vxlan: Only set has-GBP bit in header if any other bits would be set\n\n    vxlan: Only set has-GBP bit in header if any other bits would be set\n\n    This allows for a VXLAN-GBP socket to talk to a Linux VXLAN socket by\n    not setting any of the bits.\n\n    Signed-off-by: Thomas Graf <tgraf@suug.ch>\n    Signed-off-by: David S. Miller <davem@davemloft.net>\n\nUpstream: db79a621835e (\"vxlan: Only set has-GBP bit in header if any other bits would be set\")\nSigned-off-by: Thomas Graf <tgraf@noironetworks.com>\nAcked-by: Pravin B Shelar <pshelar@nicira.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/f1063b759fba1ece26dbd55e678f66c3caf59ed5"},{"sha":"9d078ec2f17adc7cceb2793687f8faa1f1c6f4f3","author":{"email":"6f50513b21952446fbc8c95a8f361b7aa434b7c7@nicira.com","name":"Ben Pfaff"},"message":"mac-learning: Implement per-port MAC learning fairness.\n\nIn \"MAC flooding\", an attacker transmits an overwhelming number of frames\nwith unique Ethernet source address on a switch port.  The goal is to\nforce the switch to evict all useful MAC learning table entries, so that\nits behavior degenerates to that of a hub, flooding all traffic.  In turn,\nthat allows an attacker to eavesdrop on the traffic of other hosts attached\nto the switch, with all the risks that that entails.\n\nBefore this commit, the Open vSwitch \"normal\" action that implements its\nstandalone switch behavior (and that can be used by OpenFlow controllers\nas well) was vulnerable to MAC flooding attacks.  This commit fixes the\nproblem by implementing per-port fairness for MAC table entries: when\nthe MAC table is at its maximum size, MAC table eviction always deletes an\nentry from the port with the most entries.  Thus, MAC entries will never\nbe evicted from ports with only a few entries if a port with a huge number\nof entries exists.\n\nControllers could introduce their own MAC flooding vulnerabilities into\nOVS.  For a controller that adds destination MAC based flows to an OpenFlow\nflow table as a reaction to \"packet-in\" events, such a bug, if it exists,\nwould be in the controller code itself and would need to be fixed in the\ncontroller.  For a controller that relies on the Open vSwitch \"learn\"\naction to add destination MAC based flows, Open vSwitch has existing\nsupport for eviction policy similar to that implemented in this commit\nthrough the \"groups\" column in the Flow_Table table documented in\novs-vswitchd.conf.db(5); we recommend that users of \"learn\" not already\nfamiliar with eviction groups to read that documentation.\n\nIn addition to implementation of per-port MAC learning fairness,\nthis commit includes some closely related changes:\n\n    - Access to client-provided \"port\" data in struct mac_entry\n      is now abstracted through helper functions, which makes it\n      easier to ensure that the per-port data structures are maintained\n      consistently.\n\n    - The mac_learning_changed() function, which had become trivial,\n      vestigial, and confusing, was removed.  Its functionality was folded\n      into the new function mac_entry_set_port().\n\n    - Many comments were added and improved; there had been a lot of\n      comment rot in previous versions.\n\nCERT: VU#784996\nReported-by: \"Ronny L. Bull - bullrl\" <bullrl@clarkson.edu>\nReported-at: http://www.irongeek.com/i.php?page=videos/derbycon4/t314-exploring-layer-2-network-security-in-virtualized-environments-ronny-l-bull-dr-jeanna-n-matthews\nSigned-off-by: Ben Pfaff <blp@nicira.com>\nAcked-by: Ethan Jackson <ethan@nicira.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/9d078ec2f17adc7cceb2793687f8faa1f1c6f4f3"},{"sha":"d8a5cedab523a99cdc97539f0cde21bb7f4932ec","author":{"email":"440c109a8f67b6bb438c7a645596c4185b792b55@radisys.com","name":"Shu Shen"},"message":"docs: Fix overlapping 'weak' edges in ovs-vswitchd.conf.db.5.\n\nMultiple weak edges between nodes at the same rank overlaps with each other in\na dot/graphviz diagram. The vswitchd.pic used in ovs-vswitchd.conf.db.5 suffers\nthis problem.\n\nRemoving \"constraint=false\" allows graphviz to rank the nodes using the weak\nedages as well so that the nodes at the ends of a weak edge won't be at the\nsame rank and allows mutlple 'weak' edges to be visible.\n\nSigned-off-by: Shu Shen <shu.shen@radisys.com>\nSigned-off-by: Ben Pfaff <blp@nicira.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/d8a5cedab523a99cdc97539f0cde21bb7f4932ec"},{"sha":"ddd347c2b4091bb5f7479db452d0a6418897a258","author":{"email":"c4089df073b4e0e1342dd7f47682381cc38caa5c@nicira.com","name":"Gurucharan Shetty"},"message":"tests: Enable running parallel unit tests for Windows.\n\ntestsuite uses mkfifo in its job dispatcher that manages\nparallel unit tests. MinGW does not have a mkfifo. This\nresults in unit tests running serially on Windows. Right\nnow it takes up to approximately 40 minutes to run all the\nunit tests on Windows.\n\nThis commit provides a job dispatcher for MinGW that uses\ntemporary files instead of mkfifo to manage parallel jobs.\nWith this commit, on a Windows machine with 4 cores and with\n8 parallel unit test sessions, it takes approximately 8\nminutes to finish a unit test run.\n\nSigned-off-by: Gurucharan Shetty <gshetty@nicira.com>\nAcked-by: Eitan Eliahu <eliahue@vmware.com>\nAcked-by: Ben Pfaff <blp@nicira.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/ddd347c2b4091bb5f7479db452d0a6418897a258"},{"sha":"185b4e3a011c88500ab182d6098e479d98cb2bc7","author":{"email":"f9a4292a438d6a2a42926ff0dd671855d2f3c640@intel.com","name":"Mark D. Gray"},"message":"ofproto-dpif: Fix whitespace and typo\n\nSigned-off-by: Mark D. Gray <mark.d.gray@intel.com>\nSigned-off-by: Ben Pfaff <blp@nicira.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/185b4e3a011c88500ab182d6098e479d98cb2bc7"},{"sha":"87df2bfc731d08802285a9ff7e387677b28501fd","author":{"email":"f9a4292a438d6a2a42926ff0dd671855d2f3c640@intel.com","name":"Mark D. Gray"},"message":"netdev-dpdk: Fix typo\n\nSigned-off-by: Mark D. Gray <mark.d.gray@intel.com>\nSigned-off-by: Ben Pfaff <blp@nicira.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/87df2bfc731d08802285a9ff7e387677b28501fd"},{"sha":"ee32150e7fd5fcfc82e0ff952215637b3c9af7d7","author":{"email":"f9a4292a438d6a2a42926ff0dd671855d2f3c640@intel.com","name":"Mark D. Gray"},"message":"netdev-dpdk: set_miimon should return EOPNOTSUPP.\n\nAccording to netdev-provider, this function should return\nEOPNOTSUPP if not supported.\n\nSigned-off-by: Mark D. Gray <mark.d.gray@intel.com>\nSigned-off-by: Ben Pfaff <blp@nicira.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/ee32150e7fd5fcfc82e0ff952215637b3c9af7d7"},{"sha":"c7ecbf1e9c5d0cd849455f273f922c4cfb0c100f","author":{"email":"6f50513b21952446fbc8c95a8f361b7aa434b7c7@nicira.com","name":"Ben Pfaff"},"message":"ofp-parse: Correctly update bucket lists if they are empty.\n\nPreviously, list_moved() only worked with non-empty lists, but this was a\ncaveat that was really easy to miss.  parse_ofp_group_mod_file() had a bug\nbecause it didn't honor that restriction.  This commit fixes the problem,\nby modifying the list_moved() interface to be harder to use incorrectly\nand then updating the callers.\n\nReported-by: Simon Horman <simon.horman@netronome.com>\nSigned-off-by: Ben Pfaff <blp@nicira.com>\nAcked-by: Thomas Graf <tgraf@noironetworks.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/c7ecbf1e9c5d0cd849455f273f922c4cfb0c100f"},{"sha":"ac6073e3cda5764664f1a32b827c9721c8e10bbd","author":{"email":"a5b616c3796039270c0a077df6257cb57af1aecc@noironetworks.com","name":"Madhu Challa"},"message":"ofproto: Add NXM_NX_TUN_GBP_ID and NXM_NX_TUN_GBP_FLAGS\n\nIntroduces two new NXMs to represent VXLAN-GBP [0] fields.\n\n  actions=load:0x10->NXM_NX_TUN_GBP_ID[],NORMAL\n  tun_gbp_id=0x10,actions=drop\n\nThis enables existing VXLAN tunnels to carry security label\ninformation such as a SELinux context to other network peers.\n\nThe values are carried to/from the datapath using the attribute\nOVS_TUNNEL_KEY_ATTR_VXLAN_OPTS.\n\n[0] https://tools.ietf.org/html/draft-smith-vxlan-group-policy-00\n\nSigned-off-by: Madhu Challa <challa@noironetworks.com>\nAcked-by: Ben Pfaff <blp@nicira.com>\nSigned-off-by: Thomas Graf <tgraf@noironetworks.com>","distinct":true,"url":"https://api.github.com/repos/pshelar/ovs/commits/ac6073e3cda5764664f1a32b827c9721c8e10bbd"}]}