diff options
| author | ps <ps@FreeBSD.org> | 2005-03-09 23:14:10 +0000 |
|---|---|---|
| committer | ps <ps@FreeBSD.org> | 2005-03-09 23:14:10 +0000 |
| commit | f01ea9b62654b444f236eae247140d7e5c0b8f7f (patch) | |
| tree | ab09ad543e8cb75a9f79e2b09f9daa21f95311d4 /sys/netinet/tcp_var.h | |
| parent | 6daa7d8d2eae259971e0e1397876bb4411b44f4e (diff) | |
| download | FreeBSD-src-f01ea9b62654b444f236eae247140d7e5c0b8f7f.zip FreeBSD-src-f01ea9b62654b444f236eae247140d7e5c0b8f7f.tar.gz | |
Add limits on the number of elements in the sack scoreboard both
per-connection and globally. This eliminates potential DoS attacks
where SACK scoreboard elements tie up too much memory.
Submitted by: Raja Mukerji (raja at moselle dot com).
Reviewed by: Mohan Srinivasan (mohans at yahoo-inc dot com).
Diffstat (limited to 'sys/netinet/tcp_var.h')
| -rw-r--r-- | sys/netinet/tcp_var.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/netinet/tcp_var.h b/sys/netinet/tcp_var.h index 9047809..252d3b0 100644 --- a/sys/netinet/tcp_var.h +++ b/sys/netinet/tcp_var.h @@ -432,6 +432,7 @@ struct tcpstat { u_long tcps_sack_rexmit_bytes; /* SACK rexmit bytes */ u_long tcps_sack_rcv_blocks; /* SACK blocks (options) received */ u_long tcps_sack_send_blocks; /* SACK blocks (options) sent */ + u_long tcps_sack_sboverflow; /* times scoreboard overflowed */ }; /* |
