CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2013/07/23 16:47:10
Modified files: sys/net : pf_norm.c pfvar.h Log message: Do not reset the fragment timeout each time a fragment arrives. Start the expire counter when the queue is created by the first fragment and drop it if the packet could not be reassembled within 60 seconds. Reported by Antonios Atlasis; OK henning@ deraadt@