commit a9bc8ab1e1931aac84f30e29412f17264d88a5a0
Author: Brian Haley <email address hidden>
Date: Thu Feb 28 22:19:16 2019 -0500
Fix KeyError in OVS firewall
When merging port ranges, the code never assumed the
conjunction ID might not be present in the set due to
already being removed.
In this case there were two security groups, both using
the same remote security group, but the first security
group does not define a port range and the second one does.
Or more generally, the first SG port range is a subset
of the second, as no port-range means the full range.
Change-Id: I17ab643abbd2ec21eda4ae1dfb9abf2d4b0657f2
Closes-bug: #1813007
(cherry picked from commit 18c578aa10c19a6befdf1f1510645200f173eb44)
Reviewed: https:/ /review. openstack. org/648102 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=a9bc8ab1e19 31aac84f30e2941 2f17264d88a5a0
Committed: https:/
Submitter: Zuul
Branch: stable/pike
commit a9bc8ab1e1931aa c84f30e29412f17 264d88a5a0
Author: Brian Haley <email address hidden>
Date: Thu Feb 28 22:19:16 2019 -0500
Fix KeyError in OVS firewall
When merging port ranges, the code never assumed the
conjunction ID might not be present in the set due to
already being removed.
In this case there were two security groups, both using
the same remote security group, but the first security
group does not define a port range and the second one does.
Or more generally, the first SG port range is a subset
of the second, as no port-range means the full range.
Change-Id: I17ab643abbd2ec 21eda4ae1dfb9ab f2d4b0657f2 befdf1f15106452 00f173eb44)
Closes-bug: #1813007
(cherry picked from commit 18c578aa10c19a6