diff options
| author | Dmitry Safonov <0x7f454c46@gmail.com> | 2024-05-29 18:29:32 +0100 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2024-06-16 13:51:05 +0200 |
| commit | e3ec86188111eea64cab5d4305c12ae6986e31d0 (patch) | |
| tree | 9242d0ac7d0754510ea9fdb87b9c6898bf0af627 /tools/lib/api/debug.c | |
| parent | fe5c604053c36c62af24eee8a76407d026ea5163 (diff) | |
net/tcp: Don't consider TCP_CLOSE in TCP_AO_ESTABLISHED
commit 33700a0c9b562700c28d31360a5f04508f459a45 upstream.
TCP_CLOSE may or may not have current/rnext keys and should not be
considered "established". The fast-path for TCP_CLOSE is
SKB_DROP_REASON_TCP_CLOSE. This is what tcp_rcv_state_process() does
anyways. Add an early drop path to not spend any time verifying
segment signatures for sockets in TCP_CLOSE state.
Cc: stable@vger.kernel.org # v6.7
Fixes: 0a3a809089eb ("net/tcp: Verify inbound TCP-AO signed segments")
Signed-off-by: Dmitry Safonov <0x7f454c46@gmail.com>
Link: https://lore.kernel.org/r/20240529-tcp_ao-sk_state-v1-1-d69b5d323c52@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'tools/lib/api/debug.c')
0 files changed, 0 insertions, 0 deletions