panic: tcp_addoptions: TCP options too long w/ with TCP_SIGNATURE support

[Mark Atkinson]

Andre Oppermann wrote:
> Before:
> 
>    MSS (4) + NOP (1) + Window scale (3) + SACK permitted (2) +
>    Timestamp (10) + Signature (18) = 38 bytes out of a maximum of 40.
> 
> After:
> 
>   MSS (4) + NOP (1) + Window scale (3) + NOP (2) + Timestamp (10) +
>   NOP (2) + Signature (18) + SACK permitted (2) + EOL (1) + PAD (1) =
>   44 bytes out of a maximum of 40.
> 
> With the attached patch it will omit the SACK permitted option (disabling
> SACK) and limiting it to 40 bytes.

Appears to work with patch.

08:06:38.324770 IP 172.16.15.254.41869 > 172.16.1.145.7: S
1106204761:1106204761(0) win 65535 <mss 1460,nop,wscale 3,nop,nop,timestamp
684040 0,nop,nop,md5:valid>

-- 
Mark Atkinson
atkin901 at yahoo.com
(!wired)?(coffee++):(wired);