diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2022-03-21 13:38:32 +0300 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2022-03-24 17:17:18 +0300 |
| commit | f2dd495a8d589371289981d5ed33e6873df94ecc (patch) | |
| tree | 5001723634f0f749b758c4f25ca7fb44672f5a19 /net/unix/af_unix.c | |
| parent | d645552e9bd96671079b27015294ec7f9748fa2b (diff) | |
| download | linux-f2dd495a8d589371289981d5ed33e6873df94ecc.tar.xz | |
netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options
Do not reset IP_CT_TCP_FLAG_BE_LIBERAL flag in out-of-sync scenarios
coming before the TCP window tracking, otherwise such connections will
fail in the window check.
Update tcp_options() to leave this flag in place and add a new helper
function to reset the tcp window state.
Based on patch from Sven Auhagen.
Fixes: c4832c7bbc3f ("netfilter: nf_ct_tcp: improve out-of-sync situation in TCP tracking")
Tested-by: Sven Auhagen <sven.auhagen@voleatech.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/unix/af_unix.c')
0 files changed, 0 insertions, 0 deletions