Add freebsd-office-hours-2020-12-03 event

[lwhsu]

Summary

Add freebsd-office-hours-2020-12-03 Git Q&A event

[gbe]

share/xml/events2020.xml

624 ↗

(On Diff #79764)

I would think that after contributors shouldn't be a comma.

[bcr]

Ready to go!

[lwhsu]

share/xml/events2020.xml

624 ↗

(On Diff #79764)

I have double checked this, both are correct: https://www.grammarly.com/blog/comma-before-and/

For keeping the same style of other entries and for advertising purpose, I would add the new event first, then we can change this style in all entries at once.

head/share/xml/events2020.xml

SYSCTL_INT(_net_inet_tcp, OID_AUTO, insecure_syn, CTLFLAG_VNET | CTLFLAG_RW,
     &VNET_NAME(tcp_insecure_syn), 0,
     "Follow RFC793 instead of RFC5961 criteria for accepting SYN packets");
 
 VNET_DEFINE(int, tcp_insecure_rst) = 0;
 SYSCTL_INT(_net_inet_tcp, OID_AUTO, insecure_rst, CTLFLAG_VNET | CTLFLAG_RW,
     &VNET_NAME(tcp_insecure_rst), 0,
     "Follow RFC793 instead of RFC5961 criteria for accepting RST packets");
 
+VNET_DEFINE(int, tcp_insecure_ack) = 0;
+SYSCTL_INT(_net_inet_tcp, OID_AUTO, insecure_ack, CTLFLAG_VNET | CTLFLAG_RW,
+    &VNET_NAME(tcp_insecure_ack), 0,
+    "Follow RFC793 criteria for validating SEG.ACK");
+
 VNET_DEFINE(int, tcp_recvspace) = 1024*64;
 #define V_tcp_recvspace VNET(tcp_recvspace)
 SYSCTL_INT(_net_inet_tcp, TCPCTL_RECVSPACE, recvspace, CTLFLAG_VNET | CTLFLAG_RW,
     &VNET_NAME(tcp_recvspace), 0, "Initial receive socket buffer size");
 
 VNET_DEFINE(int, tcp_do_autorcvbuf) = 1;
 SYSCTL_INT(_net_inet_tcp, OID_AUTO, recvbuf_auto, CTLFLAG_VNET | CTLFLAG_RW,
     &VNET_NAME(tcp_do_autorcvbuf), 0,
if (V_tcp_insecure_syn &&
                         /* Send challenge ACK. */
                         tcp_respond(tp, mtod(m, void *), th, m, tp->rcv_nxt,
                             tp->snd_nxt, TH_ACK);
                         tp->last_ack_sent = tp->rcv_nxt;
                         m = NULL;
                 }
                 goto drop;
         }
 
         /*
          * RFC 1323 PAWS: If we have a timestamp reply on this segment
          * and it's less than ts_recent, drop it.
          */
         if ((to.to_flags & TOF_TS) != 0 && tp->ts_recent &&
             TSTMP_LT(to.to_tsval, tp->ts_recent)) {
                 /* Check to see if ts_recent is over 24 days old.  */
                 if (tcp_ts_getticks() - tp->ts_recent_age > TCP_PAWS_IDLE) {
if (tp->t_state == TCPS_SYN_RECEIVED ||
                         goto dropafterack;
                 else
                         goto drop;
         }
 
         /*
          * Ack processing.
          */
+        if (SEQ_GEQ(tp->snd_una, tp->iss + (65535 << tp->snd_scale))) {
+                /* Checking SEG.ACK against ISS is definitely redundant. */
+                tp->t_flags2 |= TF2_NO_ISS_CHECK;
+        }
+        if (!V_tcp_insecure_ack) {
+                tcp_seq seq_min;
+                bool ghost_ack_check;
+
+                if (tp->t_flags2 & TF2_NO_ISS_CHECK) {
+                        /* Check for too old ACKs (RFC 5961, Section 5.2). */
+                        seq_min = tp->snd_una - tp->max_sndwnd;
+                        ghost_ack_check = false;
+                } else {
+                        if (SEQ_GT(tp->iss + 1, tp->snd_una - tp->max_sndwnd)) {
+                                /* Checking for ghost ACKs is stricter. */
+                                seq_min = tp->iss + 1;
+                                ghost_ack_check = true;
+                        } else {
+                                /*
+                                 * Checking for too old ACKs (RFC 5961,
+                                 * Section 5.2) is stricter.
+                                 */
+                                seq_min = tp->snd_una - tp->max_sndwnd;
+                                ghost_ack_check = false;
+                        }
+                }
+                if (SEQ_LT(th->th_ack, seq_min)) {
+                        if (ghost_ack_check)
+                                TCPSTAT_INC(tcps_rcvghostack);
+                        else
+                                TCPSTAT_INC(tcps_rcvacktooold);
+                        /* Send a challenge ACK. */
+                        tcp_respond(tp, mtod(m, void *), th, m,
+                            tp->rcv_nxt, tp->snd_nxt, TH_ACK);
+                        tp->last_ack_sent = tp->rcv_nxt;
+                        m = NULL;
+                        goto drop;
+                }
+        }
         switch (tp->t_state) {
         /*
          * In SYN_RECEIVED state, the ack ACKs our SYN, so enter
          * ESTABLISHED state and continue processing.
          * The ACK was checked above.
          */
         case TCPS_SYN_RECEIVED: