src-test2/sys/netinet/tcp_input.c, branch stable/4 FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=stable%2F4 2014-01-08T03:22:42Z Revert MFC of r258821 2014-01-08T03:22:42Z Peter Wemm peter@FreeBSD.org 2014-01-08T03:22:42Z urn:sha1:b870694b605722580fa6bbbe8e2956214c6affbe MFC r258821 - fix tcp simultaneous close 2014-01-07T23:04:06Z Peter Wemm peter@FreeBSD.org 2014-01-07T23:04:06Z urn:sha1:efa596224ac42e2d92907594a2fa72161aeb9c16 PR: kern/99188 MFC: 1.300 When we receive an out-of-window SYN for an "ESTABLISHED" 2006-08-21T12:43:24Z David Malone dwmalone@FreeBSD.org 2006-08-21T12:43:24Z urn:sha1:04e78af938e0fc9039008418632d15df3878e9ea connection, ACK the SYN as required by RFC793. Correct bzip2 denial of service and permission race vulnerabilities. 2005-06-29T21:43:42Z Simon L. B. Nielsen simon@FreeBSD.org 2005-06-29T21:43:42Z urn:sha1:b8833141ed790bed2f5afa0e92a90c84172f325d Obtained from: Redhat, Steve Grubb via RedHat Security: CAN-2005-0953, CAN-2005-1260 Security: FreeBSD-SA-05:14.bzip2 Approved by: obrien Correct TCP connection stall denial-of-service vulnerabilities. MFC: rev 1.270 of tcp_input.c, rev 1.25 of tcp_seq.h by ps: When a TCP packets containing a timestamp is received, inadequate checking of sequence numbers is performed, allowing an attacker to artificially increase the internal "recent" timestamp for a connection. A TCP packets with the SYN flag set is accepted for established connections, allowing an attacker to overwrite certain TCP options. Security: CAN-2005-0356, CAN-2005-2068 Security: FreeBSD-SA-05:15.tcp Approved by: cperciva MFC revs 1.235 and 1.264; 2005-01-05T08:45:43Z Mike Silbersack silby@FreeBSD.org 2005-01-05T08:45:43Z urn:sha1:01e59d4dee6c039c714785a6949d444127843145 Improve the security of RST handling, and add a sysctl which can fall back to the old method. MFC rev 1.259; accept RSTs when our window is closed. 2004-12-23T22:07:19Z Mike Silbersack silby@FreeBSD.org 2004-12-23T22:07:19Z urn:sha1:15c54e979b651ed84b2b98beaa758716351e0691 MFC: 2004-03-22T23:59:55Z Paul Saab ps@FreeBSD.org 2004-03-22T23:59:55Z urn:sha1:cadec8d42eac963d957397d3c584ca8c7031bbd7 speedup stream socket recv handling by tracking the tail of the mbuf chain instead of walking the list for each append. This has been pretty well tested at Yahoo! Obtained from: netbsd (jason thorpe) Reviewed by: silby MFC in part tcp_input.c 1.228, tcp_subr.c 1.182, tcp_var.h 1.98: 2004-03-02T17:19:18Z Jacques Vidrine nectar@FreeBSD.org 2004-03-02T17:19:18Z urn:sha1:3cda90ae2f76940f0e82e6fca649911dbc5a9d27 Limit TCP segment reassembly queue size. Submitted by: andre MFC: Import of TCP-MD5 (RFC2385) support. 2004-02-14T22:24:09Z Bruce M Simpson bms@FreeBSD.org 2004-02-14T22:24:09Z urn:sha1:e3d973742d3c9561265a6c3a361f3acd6e8283a1 Sponsored by: sentex.net MFC 1.188: Add the TCP flags to the log message when log_in_vain is 1, 2003-05-21T04:46:41Z Crist J. Clark cjc@FreeBSD.org 2003-05-21T04:46:41Z urn:sha1:904c35fcc135bdbdd0347ae024c913aae4fbb4f2 and not just when set to 2. PR: kern/43348