From 02fa045d29989577b779d45e6ba778d2a1c4094b Mon Sep 17 00:00:00 2001 From: Paul Saab Date: Tue, 19 Apr 2005 18:37:26 +0000 Subject: MFC: rev 1.10 tcp_sack.c, 1.118 tcp_var.h, 1.69 inet.c Add limits on the number of elements in the sack scoreboard both per-connection and globally. This eliminates potential DoS attacks where SACK scoreboard elements tie up too much memory. --- usr.bin/netstat/inet.c | 1 + 1 file changed, 1 insertion(+) (limited to 'usr.bin') diff --git a/usr.bin/netstat/inet.c b/usr.bin/netstat/inet.c index 6590848e904bb..bc60fd0c162dc 100644 --- a/usr.bin/netstat/inet.c +++ b/usr.bin/netstat/inet.c @@ -464,6 +464,7 @@ tcp_stats(u_long off __unused, const char *name, int af1 __unused) p(tcps_sack_rcv_blocks, "\t%lu SACK option%s (SACK blocks) received\n"); p(tcps_sack_send_blocks, "\t%lu SACK option%s (SACK blocks) sent\n"); + p1a(tcps_sack_sboverflow, "\t%lu SACK scoreboard overflow\n"); #undef p #undef p1a -- cgit v1.3