CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2015/09/10 07:36:44
Modified files:
sys/netinet : tcp_input.c
Log message:
Only half of the IPv6 source address was used as input for the syn
cache hash. That makes it trivial to create syn cache collisions.
Take the full address, xor it with random data and put it into the
hash function.
OK markus@
