From 2e7e6ae11f96bb7c92c94c332b4b4d3786157829 Mon Sep 17 00:00:00 2001 From: Florin Coras Date: Wed, 12 Dec 2018 23:31:33 -0800 Subject: tcp: drop handshake ack with fin set Change-Id: I529c34235ad2b0e4c730959bb1b8c9d50a83738c Signed-off-by: Florin Coras --- src/vnet/tcp/tcp_input.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src') diff --git a/src/vnet/tcp/tcp_input.c b/src/vnet/tcp/tcp_input.c index fc1aff40747..94dcaaf9eda 100644 --- a/src/vnet/tcp/tcp_input.c +++ b/src/vnet/tcp/tcp_input.c @@ -2727,7 +2727,7 @@ tcp46_rcv_process_inline (vlib_main_t * vm, vlib_node_runtime_t * node, } /* Make sure the ack is exactly right */ - if (tc0->rcv_nxt != vnet_buffer (b0)->tcp.seq_number) + if (tc0->rcv_nxt != vnet_buffer (b0)->tcp.seq_number || is_fin0) { error0 = TCP_ERROR_SEGMENT_INVALID; tcp_send_reset_w_pkt (tc0, b0, is_ip4); -- cgit 1.2.3-korg