jimzah/freebsd-src
1
0
Fork 0
mirror of https://github.com/freebsd/freebsd-src.git synced 2024-12-01 21:33:04 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Add Matt Dillon's quick fix hack for the self-connect DoS.

Browse Source 
PR:		5103
This commit is contained in:
Garrett Wollman 1997-11-20 20:04:49 +00:00
parent d447dbee36
commit 76d3eadb53
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=31323
2 changed files with 28 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
sys/netinet/tcp_input.c
View File

@ -31,7 +31,7 @@
* SUCH DAMAGE.
*
* @(#)tcp_input.c 8.12 (Berkeley) 5/24/95
* $Id: tcp_input.c,v 1.64 1997/10/28 15:58:52 bde Exp $
* $Id: tcp_input.c,v 1.65 1997/11/07 08:53:21 phk Exp $
*/
#include "opt_tcpdebug.h"
@ -316,6 +316,19 @@ tcp_input(m, iphlen)
}
#endif /* TUBA_INCLUDE */
/*
* Reject attempted self-connects. XXX This actually masks
* a bug elsewhere, since self-connect should work.
* However, a urrently-active DoS attack in the Internet
* sends a phony self-connect request which causes an infinite
* loop.
*/
if (ti->ti_src.s_addr == ti->ti_dst.s_addr
&& ti->ti_sport == ti->ti_dport) {
tcpstat.tcps_badsyn++;
goto drop;
}
/*
* Check that TCP offset makes sense,
* pull out TCP options and adjust length. XXX

15
sys/netinet/tcp_reass.c
View File

@ -31,7 +31,7 @@
* SUCH DAMAGE.
*
* @(#)tcp_input.c 8.12 (Berkeley) 5/24/95
* $Id: tcp_input.c,v 1.64 1997/10/28 15:58:52 bde Exp $
* $Id: tcp_input.c,v 1.65 1997/11/07 08:53:21 phk Exp $
*/
#include "opt_tcpdebug.h"
@ -316,6 +316,19 @@ tcp_input(m, iphlen)
}
#endif /* TUBA_INCLUDE */
/*
* Reject attempted self-connects. XXX This actually masks
* a bug elsewhere, since self-connect should work.
* However, a urrently-active DoS attack in the Internet
* sends a phony self-connect request which causes an infinite
* loop.
*/
if (ti->ti_src.s_addr == ti->ti_dst.s_addr
&& ti->ti_sport == ti->ti_dport) {
tcpstat.tcps_badsyn++;
goto drop;
}
/*
* Check that TCP offset makes sense,
* pull out TCP options and adjust length. XXX