| commit | 6613b6173dee098997229caf1f3b961c49da75e6 | [log] [tgz] |
|---|---|---|
| author | Florian Westphal <fw@strlen.de> | Tue Jul 17 21:03:15 2018 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Fri Jul 20 15:31:44 2018 +0200 |
| tree | c9a2de23089be23f4ae25930b67781c45823156b | |
| parent | c6cc94df65c3174be92afbee638f11cbb5e606a7 [diff] |
netfilter: conntrack: dccp: treat SYNC/SYNCACK as invalid if no prior state When first DCCP packet is SYNC or SYNCACK, we insert a new conntrack that has an un-initialized timeout value, i.e. such entry could be reaped at any time. Mark them as INVALID and only ignore SYNC/SYNCACK when connection had an old state. Reported-by: syzbot+6f18401420df260e37ed@syzkaller.appspotmail.com Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>