1
linux/net/sctp
Vlad Yasevich d670119132 [SCTP]: Follow Add-IP security consideratiosn wrt INIT/INIT-ACK
The Security Considerations section of RFC 5061 has the following
text:

   If an SCTP endpoint that supports this extension receives an INIT
   that indicates that the peer supports the ASCONF extension but does
   NOT support the [RFC4895] extension, the receiver of such an INIT
   MUST send an ABORT in response.  Note that an implementation is
   allowed to silently discard such an INIT as an option as well, but
   under NO circumstance is an implementation allowed to proceed with
   the association setup by sending an INIT-ACK in response.

   An implementation that receives an INIT-ACK that indicates that the
   peer does not support the [RFC4895] extension MUST NOT send the
   COOKIE-ECHO to establish the association.  Instead, the
   implementation MUST discard the INIT-ACK and report to the upper-
   layer user that an association cannot be established destroying the
   Transmission Control Block (TCB).

Follow the recomendations.

Signed-off-by: Vlad Yasevich <vladislav.yasevich@hp.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2008-01-28 14:59:25 -08:00
..
associola.c [SCTP]: Update ASCONF processing to conform to spec. 2008-01-28 14:59:23 -08:00
auth.c SCTP: Fix build issues with SCTP AUTH. 2007-11-29 10:17:42 -05:00
bind_addr.c [SCTP]: Implement ADD-IP special case processing for ABORT chunk 2008-01-28 14:59:24 -08:00
chunk.c [SCTP]: Enable the sending of the AUTH chunk. 2007-10-10 16:51:31 -07:00
command.c
debug.c [NET]: Fix comparisons of unsigned < 0. 2007-06-03 18:08:47 -07:00
endpointola.c SCTP: Convert custom hash lists to use hlist. 2007-11-09 11:43:40 -05:00
input.c [SCTP]: Update association lookup to look at ASCONF chunks as well 2008-01-28 14:59:22 -08:00
inqueue.c SCTP: Fix a potential race between timers and receive path. 2007-11-07 11:39:27 -05:00
ipv6.c [SCTP]: Change use_as_src into a full address state 2008-01-28 14:59:24 -08:00
Kconfig [SCTP]: Use crc32c library for checksum calculations. 2008-01-28 14:58:20 -08:00
Makefile [SCTP]: Use crc32c library for checksum calculations. 2008-01-28 14:58:20 -08:00
objcnt.c [SCTP]: Implement SCTP-AUTH internals 2007-10-10 16:51:29 -07:00
output.c [SCTP]: Use crc32c library for checksum calculations. 2008-01-28 14:58:20 -08:00
outqueue.c [SCTP]: Update ASCONF processing to conform to spec. 2008-01-28 14:59:23 -08:00
primitive.c [NET] SCTP: Fix whitespace errors. 2007-02-10 23:20:11 -08:00
proc.c SCTP: Convert custom hash lists to use hlist. 2007-11-09 11:43:40 -05:00
protocol.c [SCTP]: Change use_as_src into a full address state 2008-01-28 14:59:24 -08:00
sm_make_chunk.c [SCTP]: Follow Add-IP security consideratiosn wrt INIT/INIT-ACK 2008-01-28 14:59:25 -08:00
sm_sideeffect.c SCTP: Fix difference cases of retransmit. 2007-11-07 11:39:27 -05:00
sm_statefuns.c [SCTP]: Follow Add-IP security consideratiosn wrt INIT/INIT-ACK 2008-01-28 14:59:25 -08:00
sm_statetable.c [SCTP]: ADD-IP updates the states where ASCONFs can be sent 2008-01-28 14:59:22 -08:00
socket.c [SCTP]: Change use_as_src into a full address state 2008-01-28 14:59:24 -08:00
ssnmap.c
sysctl.c SCTP: Allow ADD_IP to work with AUTH for backward compatibility. 2007-11-07 11:39:27 -05:00
transport.c [NET]: Convert init_timer into setup_timer 2008-01-28 14:53:35 -08:00
tsnmap.c sctp: fix shadow symbol in net/sctp/tsnmap.c 2007-08-01 11:19:06 -04:00
ulpevent.c [SCTP]: Fix the name of the authentication event. 2008-01-08 23:30:02 -08:00
ulpqueue.c [SCTP]: Flush fragment queue when exiting partial delivery. 2007-12-16 14:05:45 -08:00