OpenE2K/linux
6
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
8c76368174
linux/net/ipv4
History
Florian Westphal 8c76368174 syncookies: check decoded options against sysctl settings 
Discard the ACK if we find options that do not match current sysctl
settings.

Previously it was possible to create a connection with sack, wscale,
etc. enabled even if the feature was disabled via sysctl.

Also remove an unneeded call to tcp_sack_reset() in
cookie_check_timestamp: Both call sites (cookie_v4_check,
cookie_v6_check) zero "struct tcp_options_received", hand it to
tcp_parse_options() (which does not change tcp_opt->num_sacks/dsack)
and then call cookie_check_timestamp().

Even if num_sacks/dsacks were changed, the structure is allocated on
the stack and after cookie_check_timestamp returns only a few selected
members are copied to the inet_request_sock.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
2010-06-16 14:42:15 -07:00
..
netfilter Merge branch 'master' of /repos/git/net-next-2.6 2010-06-15 17:31:06 +02:00
af_inet.c net-next: remove useless union keyword 2010-06-10 23:31:35 -07:00
ah4.c
arp.c net-next: remove useless union keyword 2010-06-10 23:31:35 -07:00
cipso_ipv4.c net: Remove unnecessary returns from void function()s 2010-05-17 23:23:14 -07:00
datagram.c net-next: remove useless union keyword 2010-06-10 23:31:35 -07:00
devinet.c arp_notify: allow drivers to explicitly request a notification event. 2010-05-31 00:27:44 -07:00
esp4.c
fib_frontend.c ipv4: add LINUX_MIB_IPRPFILTER snmp counter 2010-06-03 03:18:19 -07:00
fib_hash.c
fib_lookup.h
fib_rules.c net: rtnetlink: decouple rtnetlink address families from real address families 2010-04-26 16:13:54 +02:00
fib_semantics.c
fib_trie.c net: Remove unnecessary returns from void function()s 2010-05-17 23:23:14 -07:00
icmp.c net-next: remove useless union keyword 2010-06-10 23:31:35 -07:00
igmp.c net-next: remove useless union keyword 2010-06-10 23:31:35 -07:00
inet_connection_sock.c net-next: remove useless union keyword 2010-06-10 23:31:35 -07:00
inet_diag.c
inet_fragment.c
inet_hashtables.c net: reserve ports for applications using fixed port numbers 2010-05-15 23:28:40 -07:00
inet_lro.c
inet_timewait_sock.c
inetpeer.c inetpeer: restore small inet_peer structures 2010-06-16 11:55:39 -07:00
ip_forward.c net-next: remove useless union keyword 2010-06-10 23:31:35 -07:00
ip_fragment.c ipfrag : frag_kfree_skb() cleanup 2010-06-15 18:12:44 -07:00
ip_gre.c net-next: remove useless union keyword 2010-06-10 23:31:35 -07:00
ip_input.c net-next: remove useless union keyword 2010-06-10 23:31:35 -07:00
ip_options.c net: Remove unnecessary returns from void function()s 2010-05-17 23:23:14 -07:00
ip_output.c net-next: remove useless union keyword 2010-06-10 23:31:35 -07:00
ip_sockglue.c ip: ip_ra_control() rcu fix 2010-06-10 22:47:08 -07:00
ipcomp.c
ipconfig.c ipconfig: send host-name in DHCP requests 2010-06-02 07:05:03 -07:00
ipip.c net-next: remove useless union keyword 2010-06-10 23:31:35 -07:00
ipmr.c Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6 2010-06-11 13:32:31 -07:00
Kconfig syncookies: remove Kconfig text line about disabled-by-default 2010-06-04 15:56:01 -07:00
Makefile
netfilter.c Merge branch 'master' of /repos/git/net-next-2.6 2010-06-15 17:31:06 +02:00
proc.c ipv4: add LINUX_MIB_IPRPFILTER snmp counter 2010-06-03 03:18:19 -07:00
protocol.c
raw.c net-next: remove useless union keyword 2010-06-10 23:31:35 -07:00
route.c inetpeer: restore small inet_peer structures 2010-06-16 11:55:39 -07:00
syncookies.c syncookies: check decoded options against sysctl settings 2010-06-16 14:42:15 -07:00
sysctl_net_ipv4.c net: reserve ports for applications using fixed port numbers 2010-05-15 23:28:40 -07:00
tcp_bic.c
tcp_cong.c
tcp_cubic.c
tcp_diag.c
tcp_highspeed.c
tcp_htcp.c
tcp_hybla.c TCP: tcp_hybla: Fix integer overflow in slow start increment 2010-06-02 07:15:48 -07:00
tcp_illinois.c
tcp_input.c tcp: unify tcp flag macros 2010-06-15 11:56:19 -07:00
tcp_ipv4.c inetpeer: restore small inet_peer structures 2010-06-16 11:55:39 -07:00
tcp_lp.c
tcp_minisocks.c Merge branch 'master' of master.kernel.org:/pub/scm/linux/kernel/git/davem/net-2.6 2010-04-11 14:53:53 -07:00
tcp_output.c tcp: unify tcp flag macros 2010-06-15 11:56:19 -07:00
tcp_probe.c
tcp_scalable.c
tcp_timer.c TCP: avoid to send keepalive probes if receiving data 2010-04-27 12:53:25 -07:00
tcp_vegas.c
tcp_vegas.h
tcp_veno.c
tcp_westwood.c
tcp_yeah.c
tcp.c tcp: unify tcp flag macros 2010-06-15 11:56:19 -07:00
tunnel4.c
udp_impl.h
udp.c net-next: remove useless union keyword 2010-06-10 23:31:35 -07:00
udplite.c
xfrm4_input.c net: Use ip_route_input_noref() in input path 2010-05-17 17:18:51 -07:00
xfrm4_mode_beet.c
xfrm4_mode_transport.c
xfrm4_mode_tunnel.c
xfrm4_output.c
xfrm4_policy.c net-next: remove useless union keyword 2010-06-10 23:31:35 -07:00
xfrm4_state.c
xfrm4_tunnel.c