Xin Long e4dc99c7c2
sctp: process duplicated strreset out and addstrm out requests correctly ...
Now sctp stream reconf will process a request again even if it's seqno is
less than asoc->strreset_inseq.
If one request has been done successfully and some data chunks have been
accepted and then a duplicated strreset out request comes, the streamin's
ssn will be cleared. It will cause that stream will never receive chunks
any more because of unsynchronized ssn. It allows a replay attack.
A similar issue also exists when processing addstrm out requests. It will
cause more extra streams being added.
This patch is to fix it by saving the last 2 results into asoc. When a
duplicated strreset out or addstrm out request is received, reply it with
bad seqno if it's seqno < asoc->strreset_inseq - 2, and reply it with the
result saved in asoc if it's seqno >= asoc->strreset_inseq - 2.
Note that it saves last 2 results instead of only last 1 result, because
two requests can be sent together in one chunk.
And note that when receiving a duplicated request, the receiver side will
still reply it even if the peer has received the response. It's safe, As
the response will be dropped by the peer.
Signed-off-by: Xin Long <lucien.xin@gmail.com >
Signed-off-by: David S. Miller <davem@davemloft.net >
2017-04-18 13:39:50 -04:00
2017-01-12 04:01:17 -05:00
2017-04-12 22:02:37 +02:00
2015-02-20 17:35:14 -05:00
2017-03-09 17:01:09 -08:00
2015-09-21 16:03:04 -07:00
2017-03-23 16:41:27 -07:00
2017-04-04 17:35:58 +02:00
2016-07-11 02:01:14 +02:00
2016-02-11 03:54:14 -05:00
2017-04-18 13:39:50 -04:00
2017-04-06 13:28:35 -07:00
2017-04-12 22:02:36 +02:00
2017-01-25 12:37:04 -05:00
2017-03-28 22:32:42 -07:00
2015-09-17 13:20:05 +02:00
2017-04-06 10:11:59 +01:00
2016-09-04 13:29:29 -07:00
2017-03-21 14:41:46 -07:00
2014-09-18 10:54:36 +02:00
2017-02-07 13:07:46 -05:00
2015-06-28 16:55:44 -07:00
2016-02-09 04:45:49 -05:00
2014-11-10 13:27:49 -05:00
2015-07-27 01:05:24 -07:00
2017-04-05 18:44:54 -07:00
2017-03-24 20:49:31 -07:00
2016-06-27 15:06:17 -04:00
2017-02-27 18:43:47 -08:00
2016-07-08 12:20:57 +02:00
2017-01-20 12:12:13 -05:00
2017-02-04 19:44:22 -05:00
2016-04-19 20:09:25 -04:00
2016-04-25 16:44:27 -04:00
2016-06-25 12:19:35 -04:00
2016-04-25 16:44:27 -04:00
2016-06-09 23:41:03 -07:00
2014-02-09 17:32:50 -08:00
2015-03-06 21:50:02 -05:00
2017-03-28 17:11:54 -07:00
2015-09-17 17:18:37 -07:00
2014-02-09 17:32:49 -08:00
2014-02-09 17:32:49 -08:00
2017-04-17 11:03:17 -04:00
2016-02-16 20:21:48 -05:00
2016-11-09 13:41:54 -05:00
2017-02-07 13:07:46 -05:00
2017-02-11 21:25:18 -05:00
2015-09-23 15:33:15 -07:00
2017-04-17 15:35:38 -04:00
2017-01-11 11:02:47 -05:00
2017-04-03 19:04:48 -07:00
2017-04-03 19:04:48 -07:00
2016-05-20 18:03:16 -04:00
2016-09-30 13:29:21 +02:00
2016-09-30 13:29:21 +02:00
2016-12-05 15:21:59 -05:00
2017-04-13 13:58:22 -04:00
2016-06-17 20:23:32 -07:00
2016-08-18 01:17:32 -04:00
2017-02-08 14:38:18 -05:00
2016-07-25 17:55:43 -07:00
2014-11-05 16:30:03 -05:00
2016-03-14 12:19:46 -04:00
2016-04-27 22:48:25 -04:00
2017-01-25 16:00:33 +01:00
2016-01-04 20:40:41 +01:00
2017-01-27 10:25:34 -05:00
2017-02-03 15:16:45 -05:00
2015-12-15 23:25:20 -05:00
2017-01-18 13:04:28 -05:00
2016-04-04 22:11:20 -04:00
2017-03-09 18:23:27 -08:00
2017-03-09 18:23:27 -08:00
2016-08-13 15:08:00 -07:00
2017-01-20 11:27:22 -05:00
2017-01-18 13:04:29 -05:00
2017-01-25 14:04:38 -05:00
2016-12-29 11:38:31 -05:00
2015-12-16 00:14:12 -05:00
2016-03-13 23:55:13 -04:00
2017-02-04 19:58:14 -05:00
2016-11-04 14:45:23 -04:00
2016-11-02 15:18:36 -04:00
2017-03-21 15:27:19 -07:00
2017-02-03 15:21:21 -05:00
2017-03-17 12:49:43 +01:00
2017-04-13 13:19:48 -04:00
2017-01-31 13:16:59 -05:00
2014-11-24 04:28:49 -05:00
2017-01-13 09:38:42 +01:00
2016-08-17 19:36:23 -04:00
2016-10-13 12:05:26 -04:00
2014-10-14 02:18:27 +02:00
2014-12-10 15:21:24 -05:00
2015-05-11 10:50:17 -04:00
2014-12-10 15:21:24 -05:00
2017-02-11 02:31:11 -05:00
2017-02-27 18:43:46 -08:00
2016-07-08 13:23:12 +02:00
2014-09-22 16:23:15 -04:00
2017-04-01 20:21:44 -07:00
2016-10-03 02:00:22 -04:00
2016-10-04 02:11:51 -04:00
2017-03-28 22:02:21 -07:00
2017-04-12 13:59:21 -04:00
2017-04-04 17:35:58 +02:00
2016-07-05 09:06:29 -07:00
2016-06-27 15:06:18 -04:00
2017-04-13 13:58:22 -04:00
2015-12-08 22:02:33 -05:00
2016-07-08 12:20:57 +02:00
2016-03-23 22:09:58 -04:00
2017-02-17 12:08:05 -05:00
2017-03-12 22:53:02 -07:00
2016-08-15 10:55:53 -07:00
2017-03-24 13:17:07 -07:00
2017-01-24 13:44:28 -05:00
2016-10-23 19:35:24 -04:00
2016-10-23 19:35:24 -04:00
2016-12-25 17:21:22 +01:00
2014-12-17 11:49:55 +01:00
2016-12-29 11:38:31 -05:00
2017-03-21 15:27:19 -07:00
2017-04-17 15:35:38 -04:00
2017-03-12 22:53:02 -07:00
2017-03-02 08:42:31 +01:00
2017-03-09 18:25:34 -08:00
2016-11-09 20:40:06 -05:00
2016-11-09 20:40:06 -05:00
2017-01-09 16:07:41 -05:00
2016-04-28 11:49:45 -04:00
2016-01-19 14:44:23 -05:00
2017-04-02 19:34:55 -07:00
2016-08-28 23:32:41 -04:00
2017-02-10 11:46:39 -05:00
2015-03-12 22:58:12 -04:00
2017-04-05 07:50:32 -07:00
2015-07-09 15:12:20 -07:00
2016-05-03 16:08:14 -04:00
2015-10-26 22:24:22 -07:00
2016-06-17 20:23:32 -07:00
2017-03-24 13:17:07 -07:00
2016-12-16 10:24:44 -08:00
2016-11-15 12:16:13 -05:00
2014-09-05 17:35:28 -07:00
2017-03-27 07:04:14 +02:00
e4dc99c7c2