From f73d4c2084c9cb6df4a1f8582acef523e4ba0cb2 Mon Sep 17 00:00:00 2001 From: Florin Coras Date: Fri, 28 Jun 2019 09:18:48 -0700 Subject: [PATCH] tcp: reject out-of-order fins Type:fix Change-Id: Iab2c308739f7733dbf70953e0ea87dcc404c60da Signed-off-by: Florin Coras --- src/vnet/tcp/tcp_input.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/vnet/tcp/tcp_input.c b/src/vnet/tcp/tcp_input.c index 23030ee77d2..848028f6940 100644 --- a/src/vnet/tcp/tcp_input.c +++ b/src/vnet/tcp/tcp_input.c @@ -1698,6 +1698,10 @@ static void tcp_rcv_fin (tcp_worker_ctx_t * wrk, tcp_connection_t * tc, vlib_buffer_t * b, u32 * error) { + /* Reject out-of-order fins */ + if (vnet_buffer (b)->tcp.seq_end != tc->rcv_nxt) + return; + /* Account for the FIN and send ack */ tc->rcv_nxt += 1; tcp_program_ack (wrk, tc); -- 2.16.6