aboutsummaryrefslogtreecommitdiffstats
path: root/net/ipv4/tcp_input.c
diff options
context:
space:
mode:
Diffstat (limited to 'net/ipv4/tcp_input.c')
-rw-r--r--net/ipv4/tcp_input.c19
1 files changed, 1 insertions, 18 deletions
diff --git a/net/ipv4/tcp_input.c b/net/ipv4/tcp_input.c
index dcad8f9f96eb..967520dbe0bf 100644
--- a/net/ipv4/tcp_input.c
+++ b/net/ipv4/tcp_input.c
@@ -5815,24 +5815,7 @@ int tcp_rcv_state_process(struct sock *sk, struct sk_buff *skb)
5815 if (icsk->icsk_af_ops->conn_request(sk, skb) < 0) 5815 if (icsk->icsk_af_ops->conn_request(sk, skb) < 0)
5816 return 1; 5816 return 1;
5817 5817
5818 /* Now we have several options: In theory there is 5818 consume_skb(skb);
5819 * nothing else in the frame. KA9Q has an option to
5820 * send data with the syn, BSD accepts data with the
5821 * syn up to the [to be] advertised window and
5822 * Solaris 2.1 gives you a protocol error. For now
5823 * we just ignore it, that fits the spec precisely
5824 * and avoids incompatibilities. It would be nice in
5825 * future to drop through and process the data.
5826 *
5827 * Now that TTCP is starting to be used we ought to
5828 * queue this data.
5829 * But, this leaves one open to an easy denial of
5830 * service attack, and SYN cookies can't defend
5831 * against this problem. So, we drop the data
5832 * in the interest of security over speed unless
5833 * it's still in use.
5834 */
5835 kfree_skb(skb);
5836 return 0; 5819 return 0;
5837 } 5820 }
5838 goto discard; 5821 goto discard;