diff options
| author | tuexen <tuexen@FreeBSD.org> | 2018-04-07 20:27:11 +0000 |
|---|---|---|
| committer | tuexen <tuexen@FreeBSD.org> | 2018-04-07 20:27:11 +0000 |
| commit | 9d2361cff5b740126d8345dfbfbeb10208f79836 (patch) | |
| tree | da7007c202b3aa0f3a596a22a83c7d562d4b27ee /sys/conf/files | |
| parent | e1dc7b2275ebb61187cff4df7ad73d13b352efb8 (diff) | |
| download | FreeBSD-src-9d2361cff5b740126d8345dfbfbeb10208f79836.zip FreeBSD-src-9d2361cff5b740126d8345dfbfbeb10208f79836.tar.gz | |
MFC r326233:
Add to ipfw support for sending an SCTP packet containing an ABORT chunk.
This is similar to the TCP case. where a TCP RST segment can be sent.
There is one limitation: When sending an ABORT in response to an incoming
packet, it should be tested if there is no ABORT chunk in the received
packet. Currently, it is only checked if the first chunk is an ABORT
chunk to avoid parsing the whole packet, which could result in a DOS attack.
Thanks to Timo Voelker for helping me to test this patch.
MFC r327200:
When adding support for sending SCTP packets containing an ABORT chunk
to ipfw in https://svnweb.freebsd.org/changeset/base/326233,
a dependency on the SCTP stack was added to ipfw by accident.
This was noted by Kevel Bowling in https://reviews.freebsd.org/D13594
where also a solution was suggested. This patch is based on Kevin's
suggestion, but implements the required SCTP checksum computation
without any dependency on other SCTP sources.
While there, do some cleanups and improve comments.
Thanks to Kevin Kevin Bowling for reporting the issue and suggesting
a fix.
Diffstat (limited to 'sys/conf/files')
| -rw-r--r-- | sys/conf/files | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/conf/files b/sys/conf/files index d32f69d..a0c97a6 100644 --- a/sys/conf/files +++ b/sys/conf/files @@ -4094,7 +4094,7 @@ netinet/sctp_asconf.c optional inet sctp | inet6 sctp netinet/sctp_auth.c optional inet sctp | inet6 sctp netinet/sctp_bsd_addr.c optional inet sctp | inet6 sctp netinet/sctp_cc_functions.c optional inet sctp | inet6 sctp -netinet/sctp_crc32.c optional inet sctp | inet6 sctp +netinet/sctp_crc32.c optional inet | inet6 netinet/sctp_indata.c optional inet sctp | inet6 sctp netinet/sctp_input.c optional inet sctp | inet6 sctp netinet/sctp_output.c optional inet sctp | inet6 sctp |
