aboutsummaryrefslogtreecommitdiff
path: root/sbin/pfctl/tests/files/pf1002.ok
diff options
context:
space:
mode:
authorMichael Tuexen <tuexen@FreeBSD.org>2025-10-06 20:39:31 +0000
committerMichael Tuexen <tuexen@FreeBSD.org>2025-10-06 20:43:11 +0000
commit8af2f06a99b10c0d3ab9021949e750852662672a (patch)
tree59001018b938e87906b41d028052dfdf12fbf062 /sbin/pfctl/tests/files/pf1002.ok
parent2d184465e8bb77d4620f509b04f19ea22656f28e (diff)
tcp: improve SEG.ACK validation in SYN-RECEIVEDHEADmain
According to the fifth step in SEGMENT ARRIVES, send a RST segment in response to an ACK segment which fails the SEG.ACK check, but leave the endpoint state unchanged. FreeBSD handles this correctly when entering the SYN-RECEIVED state via the SYN-SENT state, but not in the SYN-cache code, which handles the SYN-RECEIVED state via the LISTEN state. This also fixes a panic reported by Alexander Leidinger. Reviewed by: jtl, glebius MFC after: 3 days Sponsored by: Netflix, Inc. Differential Revision: https://reviews.freebsd.org/D52934
Diffstat (limited to 'sbin/pfctl/tests/files/pf1002.ok')
0 files changed, 0 insertions, 0 deletions