diff options
author | Vlad Yasevich <vyasevich@gmail.com> | 2014-10-03 18:16:20 -0400 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2014-10-06 00:21:45 -0400 |
commit | bdf6fa52f01b941d4a80372d56de465bdbbd1d23 (patch) | |
tree | 6f37046e3268e0123dd1abbe26065fa59c3b79d6 /security/capability.c | |
parent | f408c3d956c987844dcb7c6837abfbb0331fb7f6 (diff) | |
download | talos-op-linux-bdf6fa52f01b941d4a80372d56de465bdbbd1d23.tar.gz talos-op-linux-bdf6fa52f01b941d4a80372d56de465bdbbd1d23.zip |
sctp: handle association restarts when the socket is closed.
Currently association restarts do not take into consideration the
state of the socket. When a restart happens, the current assocation
simply transitions into established state. This creates a condition
where a remote system, through a the restart procedure, may create a
local association that is no way reachable by user. The conditions
to trigger this are as follows:
1) Remote does not acknoledge some data causing data to remain
outstanding.
2) Local application calls close() on the socket. Since data
is still outstanding, the association is placed in SHUTDOWN_PENDING
state. However, the socket is closed.
3) The remote tries to create a new association, triggering a restart
on the local system. The association moves from SHUTDOWN_PENDING
to ESTABLISHED. At this point, it is no longer reachable by
any socket on the local system.
This patch addresses the above situation by moving the newly ESTABLISHED
association into SHUTDOWN-SENT state and bundling a SHUTDOWN after
the COOKIE-ACK chunk. This way, the restarted associate immidiately
enters the shutdown procedure and forces the termination of the
unreachable association.
Reported-by: David Laight <David.Laight@aculab.com>
Signed-off-by: Vlad Yasevich <vyasevich@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'security/capability.c')
0 files changed, 0 insertions, 0 deletions