Great!
So can I just replace fr_tcpstate() of 4.1.10 with one of the higher version
like 4.1.17, then rebuild ipfilter, because I can't replace the whole ipfilter
software?
Below is the comparison between 4.1.17 and 4.1.10
45c45,46
< if ((TCP_OFF(tcp) > (sizeof(tcphdr_t) >> 2))) {
---
> if ((TCP_OFF(tcp) > (sizeof(tcphdr_t) >> 2)) &&
> (tdata->td_winflags & TCP_WSCALE_SEEN)) {
47a49,52
> if (!(fdata->td_winflags & TCP_WSCALE_SEEN)) {
> fdata->td_winscale = 0;
> tdata->td_winscale = 0;
> }
54c59
< if (fr_tcpoptions(fin, tcp, fdata) == -1)
---
> if (fr_tcpoptions(fin, tcp, tdata) == -1)
Thanks,
-----Original Message-----
From: Darren Reed [mailto:[EMAIL PROTECTED]
Sent: 2007年9月11日 21:04
To: Xu, Chun Gang (Titan)
Cc: ipfilter
Subject: Re: any patch for the OOW issue?
Xu, Chun Gang (Titan) wrote:
> Hi,
>
> Is there any patch for the OOW issue below? I looked through the list
> and found several topics related to this issue, but seems no any fix,
> right?
>
> PS, I am using ipfilter 4.1.10 on Solaris 9.
>
I believe that this has been fixed.
Look at the start of fr_tcpstate().
Darren
