From: Florin Coras <fcoras@cisco.com>
Date: Thu, 13 Dec 2018 07:31:33 +0000 (-0800)
Subject: tcp: drop handshake ack with fin set
X-Git-Tag: v19.04-rc0~174
X-Git-Url: https://gerrit.fd.io/r/gitweb?a=commitdiff_plain;h=2e7e6ae11f96bb7c92c94c332b4b4d3786157829;p=vpp.git

tcp: drop handshake ack with fin set

Change-Id: I529c34235ad2b0e4c730959bb1b8c9d50a83738c
Signed-off-by: Florin Coras <fcoras@cisco.com>
---

diff --git a/src/vnet/tcp/tcp_input.c b/src/vnet/tcp/tcp_input.c
index fc1aff40747..94dcaaf9eda 100644
--- a/src/vnet/tcp/tcp_input.c
+++ b/src/vnet/tcp/tcp_input.c
@@ -2727,7 +2727,7 @@ tcp46_rcv_process_inline (vlib_main_t * vm, vlib_node_runtime_t * node,
 	    }
 
 	  /* Make sure the ack is exactly right */
-	  if (tc0->rcv_nxt != vnet_buffer (b0)->tcp.seq_number)
+	  if (tc0->rcv_nxt != vnet_buffer (b0)->tcp.seq_number || is_fin0)
 	    {
 	      error0 = TCP_ERROR_SEGMENT_INVALID;
 	      tcp_send_reset_w_pkt (tc0, b0, is_ip4);