cvs commit: src/usr.bin/netstat inet.c src/sys/netinet tcp_sack.c tcp_var.h

[Paul Saab]

ps          2005-03-09 23:14:10 UTC

  FreeBSD src repository

  Modified files:
    usr.bin/netstat      inet.c 
    sys/netinet          tcp_sack.c tcp_var.h 
  Log:
  Add limits on the number of elements in the sack scoreboard both
  per-connection and globally. This eliminates potential DoS attacks
  where SACK scoreboard elements tie up too much memory.
  
  Submitted by:   Raja Mukerji (raja at moselle dot com).
  Reviewed by:    Mohan Srinivasan (mohans at yahoo-inc dot com).
  
  Revision  Changes    Path
  1.10      +41 -3     src/sys/netinet/tcp_sack.c
  1.118     +1 -0      src/sys/netinet/tcp_var.h
  1.69      +1 -0      src/usr.bin/netstat/inet.c