CVSROOT: /cvs Module name: src Changes by: [email protected] 2018/09/10 09:54:28
Modified files:
sys/net : pf_syncookies.c
Log message:
in pf_syncookie_validate, return early if we don't have syncookies in
flight that can possibly match. there is a tiny but existing chance that
a sequence number matches w/ our hash and we'd end up dropping traffic.
unclear whether that has actually happened since the report chain is long :)
report via haesbert via bluhm; ok bluhm
