Now sctp stream reconf will process a request again even if it's seqno
is less than asoc->strreset_inseq. It may cause a replay attack.
This patchset is to avoid it by add proper process for all duplicated
stream reconf requests.
Xin Long (3):
sctp: process duplicated strreset out and addstrm out requests
correctly
sctp: process duplicated strreset in and addstrm in requests correctly
sctp: process duplicated strreset asoc request correctly
include/net/sctp/structs.h | 1 +
net/sctp/stream.c | 96 +++++++++++++++++++++++++++++++++++-----------
2 files changed, 74 insertions(+), 23 deletions(-)
--
2.1.0
