d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Change incorrect stale cookie detection in syncookie_lookup() that prematurely

Browse Source 
declared a cookie as expired.

Reviewed by:	andre@, silby@
Reported by:    Yahoo!
This commit is contained in:
Stephan Uphoff 2008-06-16 20:08:22 +00:00
parent 104ac85378
commit 606a2669cf
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
sys/netinet/tcp_syncache.c
View File

@ -1618,7 +1618,7 @@ syncookie_lookup(struct in_conninfo *inc, struct syncache_head *sch,
* The secret wasn't updated for the lifetime of a syncookie,
* so this SYN-ACK/ACK is either too old (replay) or totally bogus.
*/
if (sch->sch_reseed < time_uptime) {
if (sch->sch_reseed + SYNCOOKIE_LIFETIME < time_uptime) {
return (NULL);
}