sctp: fix to check the source address of COOKIE-ECHO chunk
SCTP does not check whether the source address of COOKIE-ECHO chunk is the original address of INIT chunk or part of the any address parameters saved in COOKIE in CLOSED state. So even if the COOKIE-ECHO chunk is from any address but with correct COOKIE, the COOKIE-ECHO chunk still be accepted. If the COOKIE is not from a valid address, the assoc should not be established. Signed-off-by: Wei Yongjun <yjwei@cn.fujitsu.com> Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
committed by
David S. Miller
parent
85c5ed4e44
commit
de6becdc08
@ -1400,7 +1400,7 @@ int sctp_has_association(const union sctp_addr *laddr,
|
||||
int sctp_verify_init(const struct sctp_association *asoc, sctp_cid_t,
|
||||
sctp_init_chunk_t *peer_init, struct sctp_chunk *chunk,
|
||||
struct sctp_chunk **err_chunk);
|
||||
int sctp_process_init(struct sctp_association *, sctp_cid_t cid,
|
||||
int sctp_process_init(struct sctp_association *, struct sctp_chunk *chunk,
|
||||
const union sctp_addr *peer,
|
||||
sctp_init_chunk_t *init, gfp_t gfp);
|
||||
__u32 sctp_generate_tag(const struct sctp_endpoint *);
|
||||
|
Reference in New Issue
Block a user