HomeFreeBSD

pf: remove incorrect fragmentation check

Description

pf: remove incorrect fragmentation check

We do not need to check PFDESC_IP_REAS while tracking TCP state.
Moreover, this check incorrectly considers no-data packets (e.g. RST) to
be in-window when this flag is not set.

Sponsored by: Rubicon Communications, LLC ("Netgate")
Approved by: so
Security: FreeBSD-SA-23:17.pf

(cherry picked from commit 6284d5f76d6bd2d97fe287c5adabf59c79688eda)
(cherry picked from commit ee1d1e38fae65d045b113a7053651bbd7b780e1d)

Details

Provenance
kpAuthored on Nov 29 2023, 6:06 PM
markjCommitted on Dec 5 2023, 6:28 PM
Parents
rG6d94fc2b0db9: compiler-rt: avoid segfaults when re-exec'ing with ASLR
Branches
Unknown
Tags
Unknown