HomeFreeBSD

pf: remove incorrect fragmentation check

Description

pf: remove incorrect fragmentation check

We do not need to check PFDESC_IP_REAS while tracking TCP state.
Moreover, this check incorrectly considers no-data packets (e.g. RST) to
be in-window when this flag is not set.

Sponsored by: Rubicon Communications, LLC ("Netgate")
Approved by: so
Security: FreeBSD-SA-23:17.pf

(cherry picked from commit 6284d5f76d6bd2d97fe287c5adabf59c79688eda)
(cherry picked from commit 0415f0554b72b93a1986292d28f679594f6ce6a6)

Details

Provenance
kpAuthored on Nov 29 2023, 6:06 PM
markjCommitted on Dec 5 2023, 6:31 PM
Parents
rG7f1c8b021bfe: Add UPDATING entries and bump version.
Branches
Unknown
Tags
Unknown