summaryrefslogtreecommitdiff
path: root/sys/dev/microcode
diff options
context:
space:
mode:
authormaxv <maxv@NetBSD.org>2018-03-01 06:08:43 +0000
committermaxv <maxv@NetBSD.org>2018-03-01 06:08:43 +0000
commit444f885dcc9bd97f2d7507acbb027cb260a08a3b (patch)
treee77f7b706e6581fb68a27436e272fa91ff0add50 /sys/dev/microcode
parent2e395a9d1af7fce0c07b7a01e8109fc44a268f9a (diff)
Revert rev1.183 (2003).
It was intended as an optimization, but it increases the attack surface: the IPsec policy is not enforced on RST packets when the socket is in the LISTEN state, and an (unauthenticated) attacker could jam the connection between two IPsec hosts by sending RST packets between the client's SYN and ACK packets. Discussed with ozaki-r@.
Diffstat (limited to 'sys/dev/microcode')
0 files changed, 0 insertions, 0 deletions