From mboxrd@z Thu Jan 1 00:00:00 1970 From: Xin Long Date: Sat, 15 Apr 2017 14:00:26 +0000 Subject: [PATCH net-next 0/3] sctp: add proper process for duplicated stream reconf requests Message-Id: List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: network dev , linux-sctp@vger.kernel.org Cc: Marcelo Ricardo Leitner , Neil Horman , davem@davemloft.net Now sctp stream reconf will process a request again even if it's seqno is less than asoc->strreset_inseq. It may cause a replay attack. This patchset is to avoid it by add proper process for all duplicated stream reconf requests. Xin Long (3): sctp: process duplicated strreset out and addstrm out requests correctly sctp: process duplicated strreset in and addstrm in requests correctly sctp: process duplicated strreset asoc request correctly include/net/sctp/structs.h | 1 + net/sctp/stream.c | 96 +++++++++++++++++++++++++++++++++++----------- 2 files changed, 74 insertions(+), 23 deletions(-) -- 2.1.0