]> CyberLeo.Net >> Repos - FreeBSD/FreeBSD.git/commit
pf: remove incorrect fragmentation check
authorKristof Provost <kp@FreeBSD.org>
Wed, 29 Nov 2023 18:06:31 +0000 (19:06 +0100)
committerMark Johnston <markj@FreeBSD.org>
Tue, 5 Dec 2023 18:25:22 +0000 (13:25 -0500)
commitee1d1e38fae65d045b113a7053651bbd7b780e1d
treed6c1acb472d192536c08b35a9430bc9b706c13eb
parent4d4b3a34267787a03f03125fc01532ff2f8539d1
pf: remove incorrect fragmentation check

We do not need to check PFDESC_IP_REAS while tracking TCP state.
Moreover, this check incorrectly considers no-data packets (e.g. RST) to
be in-window when this flag is not set.

Sponsored by: Rubicon Communications, LLC ("Netgate")
Approved by: so
Security: FreeBSD-SA-23:17.pf

(cherry picked from commit 6284d5f76d6bd2d97fe287c5adabf59c79688eda)
sys/netpfil/pf/pf.c