Florian Westphal
8c76368174
syncookies: check decoded options against sysctl settings ...
Discard the ACK if we find options that do not match current sysctl
settings.
Previously it was possible to create a connection with sack, wscale,
etc. enabled even if the feature was disabled via sysctl.
Also remove an unneeded call to tcp_sack_reset() in
cookie_check_timestamp: Both call sites (cookie_v4_check,
cookie_v6_check) zero "struct tcp_options_received", hand it to
tcp_parse_options() (which does not change tcp_opt->num_sacks/dsack)
and then call cookie_check_timestamp().
Even if num_sacks/dsacks were changed, the structure is allocated on
the stack and after cookie_check_timestamp returns only a few selected
members are copied to the inet_request_sock.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
2010-06-16 14:42:15 -07:00
2010-05-21 16:44:34 -05:00
2010-05-10 09:34:03 +02:00
2010-05-23 23:57:41 -07:00
2010-02-15 15:38:10 +01:00
2010-03-30 22:02:32 +09:00
2010-06-15 17:31:06 +02:00
2010-05-11 14:40:55 +02:00
2010-06-09 16:14:25 -07:00
2010-06-03 03:21:52 -07:00
2009-10-22 21:56:42 -07:00
2010-05-12 23:02:23 -07:00
2010-06-11 18:37:08 -07:00
2010-02-25 09:41:03 +01:00
2010-05-01 15:00:15 -07:00
2009-11-04 05:06:25 -08:00
2010-03-30 22:02:32 +09:00
2010-06-11 11:34:06 -07:00
2010-05-25 18:53:57 -07:00
2009-12-11 15:07:56 -08:00
2010-06-03 03:21:52 -07:00
2010-03-27 19:23:46 -07:00
2010-06-03 03:21:52 -07:00
2010-06-10 23:31:35 -07:00
2010-06-04 15:56:00 -07:00
2010-04-26 16:02:04 +02:00
2010-04-07 03:43:18 -07:00
2009-11-04 05:06:25 -08:00
2010-06-02 05:16:23 -07:00
2010-04-13 14:49:31 -07:00
2010-02-08 16:50:53 -05:00
2009-11-06 14:32:18 +03:00
2010-05-18 15:36:06 -07:00
2010-04-15 23:36:37 -07:00
2009-12-08 20:17:51 -08:00
2010-04-15 23:36:37 -07:00
2009-12-08 20:17:51 -08:00
2010-04-27 15:11:48 -07:00
2010-04-27 12:39:01 -07:00
2010-06-16 11:55:39 -07:00
2010-06-10 23:31:35 -07:00
2010-04-13 01:41:33 -07:00
2010-06-03 03:21:52 -07:00
2009-11-06 00:55:55 -08:00
2010-02-18 12:31:05 +01:00
2010-06-10 22:47:08 -07:00
2010-02-16 23:05:38 -08:00
2010-06-10 23:31:35 -07:00
2010-06-02 07:08:31 -07:00
2010-06-03 03:21:52 -07:00
2010-03-31 14:49:12 -04:00
2009-12-26 20:43:57 -08:00
2009-12-26 20:46:28 -08:00
2010-06-08 09:31:21 -04:00
2010-06-03 03:21:52 -07:00
2010-04-23 13:35:55 +09:00
2010-06-03 03:21:52 -07:00
2010-04-15 12:26:39 +02:00
2010-03-12 15:52:40 -08:00
2010-03-30 22:02:32 +09:00
2010-03-19 22:47:23 -07:00
2010-03-30 22:02:32 +09:00
2009-11-20 15:35:04 -08:00
2010-06-02 03:23:51 -07:00
2009-11-05 21:40:17 -08:00
2010-04-13 14:49:34 -07:00
2009-11-04 05:06:25 -08:00
2010-02-01 15:40:06 -05:00
2010-01-17 19:09:39 -08:00
2010-06-10 23:31:35 -07:00
2010-02-27 02:43:40 -08:00
2010-06-02 05:09:29 -07:00
2009-11-04 05:06:25 -08:00
2010-04-22 16:00:00 -07:00
2010-06-06 17:42:02 -07:00
2010-06-16 14:42:15 -07:00
2010-04-23 23:35:28 -07:00
2009-11-10 20:54:38 -08:00
2009-10-07 16:39:43 -04:00
2009-12-09 19:43:33 -08:00
2009-11-06 14:32:24 +03:00
2010-05-17 17:39:27 -07:00
2010-04-22 16:12:36 -07:00
2010-04-11 14:53:53 -07:00
8c76368174