Author: tuexen
Date: Sun Mar  8 14:48:32 2020
New Revision: 358740
URL: https://svnweb.freebsd.org/changeset/base/358740

Log:
  MFC r358614:
  
  Don't send an uninitialised traffic class in the IPv6 header, when
  sending a TCP segment from the TCP SYN cache (like a SYN-ACK).
  This fix initialises it to zero. This is correct for the ECN bits,
  but is does not honor the DSCP what an application might have set via
  the IPPROTO_IPV6 level socket options IPV6_TCLASS. That will be
  fixed separately.
  
  Reviewed by:          Richard Scheffenegger
  Sponsored by:         Netflix, Inc.
  Differential Revision:        https://reviews.freebsd.org/D23900

Modified:
  stable/11/sys/netinet/tcp_syncache.c
Directory Properties:
  stable/11/   (props changed)

Modified: stable/11/sys/netinet/tcp_syncache.c
==============================================================================
--- stable/11/sys/netinet/tcp_syncache.c        Sun Mar  8 14:48:21 2020        
(r358739)
+++ stable/11/sys/netinet/tcp_syncache.c        Sun Mar  8 14:48:32 2020        
(r358740)
@@ -1679,7 +1679,8 @@ syncache_respond(struct syncache *sc, struct syncache_
                ip6->ip6_dst = sc->sc_inc.inc6_faddr;
                ip6->ip6_plen = htons(tlen - hlen);
                /* ip6_hlim is set after checksum */
-               ip6->ip6_flow &= ~IPV6_FLOWLABEL_MASK;
+               /* Zero out traffic class and flow label. */
+               ip6->ip6_flow &= ~IPV6_FLOWINFO_MASK;
                ip6->ip6_flow |= sc->sc_flowlabel;
 
                th = (struct tcphdr *)(ip6 + 1);
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-all
To unsubscribe, send any mail to "[email protected]"

Reply via email to