CVSROOT: /cvs Module name: src Changes by: bl...@cvs.openbsd.org 2017/06/24 14:32:39
Modified files:
sys/net : pf_norm.c
Log message:
To avoid packet loss due to reuse of the 16 bit IPv4 fragment id,
we need suitable data structures. Organize the pf fragments with
two red-black trees. One is holding the address and protocol
information and the other has only the fragment id. This will allow
to drop fragemts for specific connections more aggressively. `
from markus@; OK sashan@
