cvs commit: src/sys/netinet tcp_output.c tcp_subr.c tcp_var.h

[Andre Oppermann]

andre       2005-05-04 13:59:26 UTC

  FreeBSD src repository

  Modified files:        (Branch: RELENG_5)
    sys/netinet          tcp_output.c tcp_subr.c tcp_var.h 
  Log:
  MFC:
    tcp_output.c rev 1.109, tcp_subr.c rev 1.222, tcp_var.h rev 1.120.
  
    Ignore ICMP Source Quench messages for TCP sessions.  Source Quench is
    ineffective, depreciated and can be abused to degrade the performance
    of active TCP sessions if spoofed.
  
    Replace a bogus call to tcp_quench() in tcp_output() with the direct
    equivalent tcpcb variable assignment.
  
    Security:     draft-gont-tcpm-icmp-attacks-03.txt Section 7.1
  
  Revision    Changes    Path
  1.100.2.7   +1 -1      src/sys/netinet/tcp_output.c
  1.201.2.17  +11 -24    src/sys/netinet/tcp_subr.c
  1.109.2.8   +0 -2      src/sys/netinet/tcp_var.h