diff options
| author | rrs <rrs@FreeBSD.org> | 2007-06-15 17:59:57 +0000 |
|---|---|---|
| committer | rrs <rrs@FreeBSD.org> | 2007-06-15 17:59:57 +0000 |
| commit | 57b3f6ebdecb9baca61db7b79bd89926b5be6c2e (patch) | |
| tree | a0242057ec0c3b373ca3da10937b024b87996162 /sys/netinet/sctp_indata.h | |
| parent | 6b110dc4737f233a6f6e37b1f2fafa7bdeee7520 (diff) | |
| download | FreeBSD-src-57b3f6ebdecb9baca61db7b79bd89926b5be6c2e.zip FreeBSD-src-57b3f6ebdecb9baca61db7b79bd89926b5be6c2e.tar.gz | |
- Issue one, new stack reduction left packet_drop handling still
thinking it had the whole chunk. This could cause a crash if
a large packet drop came in. Fixed by adjusting the trunc length
down to the limit.
- Large sacks with lots of segments could also have same issue. Changed
duplicate and segment handling to use proper get_m_ptr function to
pull each block from mbuf chains.
Diffstat (limited to 'sys/netinet/sctp_indata.h')
| -rw-r--r-- | sys/netinet/sctp_indata.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/netinet/sctp_indata.h b/sys/netinet/sctp_indata.h index 3ec0273..8a65a20 100644 --- a/sys/netinet/sctp_indata.h +++ b/sys/netinet/sctp_indata.h @@ -96,7 +96,7 @@ sctp_express_handle_sack(struct sctp_tcb *stcb, uint32_t cumack, uint32_t rwnd, int nonce_sum_flag, int *abort_now); void -sctp_handle_sack(struct sctp_sack_chunk *, struct sctp_tcb *, +sctp_handle_sack(struct mbuf *m, int offset, struct sctp_sack_chunk *, struct sctp_tcb *, struct sctp_nets *, int *, int, uint32_t); /* draft-ietf-tsvwg-usctp */ |
