Files
twx-linux/include/linux
Florian Westphal 59d2b1e5cb netfilter: conntrack: allow sctp hearbeat after connection re-use
[ Upstream commit cc5453a5b7 ]

If an sctp connection gets re-used, heartbeats are flagged as invalid
because their vtag doesn't match.

Handle this in a similar way as TCP conntrack when it suspects that the
endpoints and conntrack are out-of-sync.

When a HEARTBEAT request fails its vtag validation, flag this in the
conntrack state and accept the packet.

When a HEARTBEAT_ACK is received with an invalid vtag in the reverse
direction after we allowed such a HEARTBEAT through, assume we are
out-of-sync and re-set the vtag info.

v2: remove left-over snippet from an older incarnation that moved
    new_state/old_state assignments, thats not needed so keep that
    as-is.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2020-09-17 13:47:45 +02:00
..
2019-09-17 10:27:46 -07:00
2020-02-19 19:53:09 +01:00
2020-09-03 11:27:04 +02:00
2020-03-25 08:25:58 +01:00
2019-10-02 06:36:50 -07:00
2019-12-13 08:42:53 +01:00
2019-12-13 08:43:18 +01:00
2020-07-29 10:18:36 +02:00
2020-03-18 07:17:46 +01:00
2020-04-17 10:50:12 +02:00
2020-04-02 15:11:00 +02:00
2019-10-31 14:01:40 -07:00
2019-09-25 17:51:41 -07:00
2019-10-02 10:06:45 +02:00
2020-05-20 08:20:29 +02:00
2020-04-02 15:11:00 +02:00