svn commit: r332211 - stable/11/sys/netinet

[Michael Tuexen]

Author: tuexen
Date: Sat Apr  7 19:42:53 2018
New Revision: 332211
URL: https://svnweb.freebsd.org/changeset/base/332211

Log:
  MFC r324317:
  
  Ensure that the accept ABORT chunks with the T-bit set only the
  a non-zero matching peer tag is provided.

Modified:
  stable/11/sys/netinet/sctp_input.c
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/sys/netinet/sctp_input.c
==============================================================================
--- stable/11/sys/netinet/sctp_input.c	Sat Apr  7 19:40:48 2018	(r332210)
+++ stable/11/sys/netinet/sctp_input.c	Sat Apr  7 19:42:53 2018	(r332211)
@@ -4676,6 +4676,7 @@ sctp_process_control(struct mbuf *m, int iphlen, int *
 			if ((((ch->chunk_flags & SCTP_HAD_NO_TCB) == 0) &&
 			    (vtag_in == asoc->my_vtag)) ||
 			    (((ch->chunk_flags & SCTP_HAD_NO_TCB) == SCTP_HAD_NO_TCB) &&
+			    (asoc->peer_vtag != htonl(0)) &&
 			    (vtag_in == asoc->peer_vtag))) {
 				/* this is valid */
 			} else {