]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
Improve r265338. When inserting mbufs into TCP reassembly queue,
authorGleb Smirnoff <glebius@FreeBSD.org>
Thu, 4 Sep 2014 09:15:44 +0000 (09:15 +0000)
committerGleb Smirnoff <glebius@FreeBSD.org>
Thu, 4 Sep 2014 09:15:44 +0000 (09:15 +0000)
commitba32fcfff9c95bd7b3fddcf6117664e1961a3b44
treeb3f17318e9cda7076d33c1b732a63606f09ca387
parent1967edba028e1a250ae2cdb6d80e363673af6eba
Improve r265338. When inserting mbufs into TCP reassembly queue,
try to collapse adjacent pieces using m_catpkt(). In best case
scenario it copies data and frees mbufs, making mbuf exhaustion
attack harder.

Suggested by: Jonathan Looney <jonlooney gmail.com>
Security: Hardens against remote mbuf exhaustion attack.
Sponsored by: Netflix
Sponsored by: Nginx, Inc.
sys/netinet/tcp_reass.c