aboutsummaryrefslogtreecommitdiffstats
path: root/net/dccp
diff options
context:
space:
mode:
authorD.S. Ljungmark <ljungmark@modio.se>2015-03-25 09:28:15 +0100
committerZiyan <jaraidaniel@gmail.com>2016-01-05 18:20:36 +0100
commit5956de2e93cf2fbb19e2f6758fe8da3fff94319d (patch)
tree929566d530d2df34aa17af77febcc2134a24ca5b /net/dccp
parent77bb025d7bf354766b1ba888f8bae02ee99d0dd8 (diff)
downloadkernel_samsung_tuna-5956de2e93cf2fbb19e2f6758fe8da3fff94319d.zip
kernel_samsung_tuna-5956de2e93cf2fbb19e2f6758fe8da3fff94319d.tar.gz
kernel_samsung_tuna-5956de2e93cf2fbb19e2f6758fe8da3fff94319d.tar.bz2
ipv6: Don't reduce hop limit for an interface
A local route may have a lower hop_limit set than global routes do. RFC 3756, Section 4.2.7, "Parameter Spoofing" > 1. The attacker includes a Current Hop Limit of one or another small > number which the attacker knows will cause legitimate packets to > be dropped before they reach their destination. > As an example, one possible approach to mitigate this threat is to > ignore very small hop limits. The nodes could implement a > configurable minimum hop limit, and ignore attempts to set it below > said limit. Change-Id: I51ee1778e3d2d5fa1aefbdf1ad8869e4e8dc28b2 Signed-off-by: D.S. Ljungmark <ljungmark@modio.se> Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/dccp')
0 files changed, 0 insertions, 0 deletions