git: dd36606b1bc9 - main - sctp: improve sending of ABORT packets in response to INIT-ACKs

From: Michael Tuexen <tuexen_at_FreeBSD.org>
Date: Wed, 12 Oct 2022 23:08:41 UTC
The branch main has been updated by tuexen:

URL: https://cgit.FreeBSD.org/src/commit/?id=dd36606b1bc90d1459e0d04be4ea5859d3eabb16

commit dd36606b1bc90d1459e0d04be4ea5859d3eabb16
Author:     Michael Tuexen <tuexen@FreeBSD.org>
AuthorDate: 2022-10-12 23:05:44 +0000
Commit:     Michael Tuexen <tuexen@FreeBSD.org>
CommitDate: 2022-10-12 23:05:44 +0000

    sctp: improve sending of ABORT packets in response to INIT-ACKs
    
    Ensure that the initiate tag of the INIT-ACK chunk is used as the
    verification tag of the packet containing the ABORT chunk.
    
    Reported by:    Suganya Dharma
    MFC after:      1 week
---
 sys/netinet/sctp_input.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/sys/netinet/sctp_input.c b/sys/netinet/sctp_input.c
index 46b818c9983e..3f5046811258 100644
--- a/sys/netinet/sctp_input.c
+++ b/sys/netinet/sctp_input.c
@@ -412,7 +412,10 @@ sctp_process_init_ack(struct mbuf *m, int iphlen, int offset,
 	    &nat_friendly, &cookie_found);
 	if (abort_flag) {
 		/* Send an abort and notify peer */
-		sctp_abort_an_association(stcb->sctp_ep, stcb, op_err, false, SCTP_SO_NOT_LOCKED);
+		sctp_abort_association(stcb->sctp_ep, stcb, m, iphlen,
+		    src, dst, sh, op_err,
+		    mflowtype, mflowid,
+		    vrf_id, net->port);
 		*abort_no_unlock = 1;
 		return (-1);
 	}