sctp: improve sending of ABORT packets in response to INIT-ACKs

Ensure that the initiate tag of the INIT-ACK chunk is used as the
verification tag of the packet containing the ABORT chunk.

Reported by:	Suganya Dharma
MFC after:	1 week
This commit is contained in:
Michael Tuexen 2022-10-13 01:05:44 +02:00
parent 53a31c87df
commit dd36606b1b

View File

@ -412,7 +412,10 @@ sctp_process_init_ack(struct mbuf *m, int iphlen, int offset,
&nat_friendly, &cookie_found);
if (abort_flag) {
/* Send an abort and notify peer */
sctp_abort_an_association(stcb->sctp_ep, stcb, op_err, false, SCTP_SO_NOT_LOCKED);
sctp_abort_association(stcb->sctp_ep, stcb, m, iphlen,
src, dst, sh, op_err,
mflowtype, mflowid,
vrf_id, net->port);
*abort_no_unlock = 1;
return (-1);
}