commit 9751ebd36dc24f99b1951e928f8b910e7e0e01f7
Author: Brian Haley <email address hidden>
Date: Thu Feb 28 22:19:16 2019 -0500
Fix KeyError in OVS firewall
When merging port ranges, the code never assumed the
conjunction ID might not be present in the set due to
already being removed.
In this case there were two security groups, both using
the same remote security group, but the first security
group does not define a port range and the second one does.
Or more generally, the first SG port range is a subset
of the second, as no port-range means the full range.
Change-Id: I17ab643abbd2ec21eda4ae1dfb9abf2d4b0657f2
Closes-bug: #1813007
(cherry picked from commit 18c578aa10c19a6befdf1f1510645200f173eb44)
Reviewed: https:/ /review. openstack. org/648004 /git.openstack. org/cgit/ openstack/ neutron/ commit/ ?id=9751ebd36dc 24f99b1951e928f 8b910e7e0e01f7
Committed: https:/
Submitter: Zuul
Branch: stable/queens
commit 9751ebd36dc24f9 9b1951e928f8b91 0e7e0e01f7
Author: Brian Haley <email address hidden>
Date: Thu Feb 28 22:19:16 2019 -0500
Fix KeyError in OVS firewall
When merging port ranges, the code never assumed the
conjunction ID might not be present in the set due to
already being removed.
In this case there were two security groups, both using
the same remote security group, but the first security
group does not define a port range and the second one does.
Or more generally, the first SG port range is a subset
of the second, as no port-range means the full range.
Change-Id: I17ab643abbd2ec 21eda4ae1dfb9ab f2d4b0657f2 befdf1f15106452 00f173eb44)
Closes-bug: #1813007
(cherry picked from commit 18c578aa10c19a6