svn commit: r324317 - head/sys/netinet

[Michael Tuexen]

Author: tuexen
Date: Thu Oct  5 13:29:54 2017
New Revision: 324317
URL: https://svnweb.freebsd.org/changeset/base/324317

Log:
  Ensure that the accept ABORT chunks with the T-bit set only the
  a non-zero matching peer tag is provided.
  
  MFC after:	1 week

Modified:
  head/sys/netinet/sctp_input.c

Modified: head/sys/netinet/sctp_input.c
==============================================================================
--- head/sys/netinet/sctp_input.c	Thu Oct  5 13:22:14 2017	(r324316)
+++ head/sys/netinet/sctp_input.c	Thu Oct  5 13:29:54 2017	(r324317)
@@ -4673,6 +4673,7 @@ sctp_process_control(struct mbuf *m, int iphlen, int *
 			if ((((ch->chunk_flags & SCTP_HAD_NO_TCB) == 0) &&
 			    (vtag_in == asoc->my_vtag)) ||
 			    (((ch->chunk_flags & SCTP_HAD_NO_TCB) == SCTP_HAD_NO_TCB) &&
+			    (asoc->peer_vtag != htonl(0)) &&
 			    (vtag_in == asoc->peer_vtag))) {
 				/* this is valid */
 			} else {