]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
pf: remove incorrect fragmentation check
authorKristof Provost <kp@FreeBSD.org>
Wed, 29 Nov 2023 18:06:31 +0000 (19:06 +0100)
committerMark Johnston <markj@FreeBSD.org>
Tue, 5 Dec 2023 18:28:12 +0000 (13:28 -0500)
commit45e256e24c976a55dc856907a57564cbc30cfb60
tree81902a7f9d39f2a1f2ba385e59733310963f3193
parent6d94fc2b0db9c2f0b0d5b116513d745122bc37c4
pf: remove incorrect fragmentation check

We do not need to check PFDESC_IP_REAS while tracking TCP state.
Moreover, this check incorrectly considers no-data packets (e.g. RST) to
be in-window when this flag is not set.

Sponsored by: Rubicon Communications, LLC ("Netgate")
Approved by: so
Security: FreeBSD-SA-23:17.pf

(cherry picked from commit 6284d5f76d6bd2d97fe287c5adabf59c79688eda)
(cherry picked from commit ee1d1e38fae65d045b113a7053651bbd7b780e1d)
sys/netpfil/pf/pf.c