diff options
author | glebius <glebius@FreeBSD.org> | 2014-09-04 09:15:44 +0000 |
---|---|---|
committer | glebius <glebius@FreeBSD.org> | 2014-09-04 09:15:44 +0000 |
commit | ae21082d79820db4832b2e5dbee75b5bdba98f66 (patch) | |
tree | b3f17318e9cda7076d33c1b732a63606f09ca387 /usr.sbin | |
parent | 9bd9cb7c21e8cf6c5c195b00f1a2b5b2ff20283d (diff) | |
download | FreeBSD-src-ae21082d79820db4832b2e5dbee75b5bdba98f66.zip FreeBSD-src-ae21082d79820db4832b2e5dbee75b5bdba98f66.tar.gz |
Improve r265338. When inserting mbufs into TCP reassembly queue,
try to collapse adjacent pieces using m_catpkt(). In best case
scenario it copies data and frees mbufs, making mbuf exhaustion
attack harder.
Suggested by: Jonathan Looney <jonlooney gmail.com>
Security: Hardens against remote mbuf exhaustion attack.
Sponsored by: Netflix
Sponsored by: Nginx, Inc.
Diffstat (limited to 'usr.sbin')
0 files changed, 0 insertions, 0 deletions