summaryrefslogtreecommitdiff
path: root/net/ipv4/tcp_input.c
diff options
context:
space:
mode:
authorFlorian Westphal <fw@strlen.de>2013-09-20 20:32:56 (GMT)
committerDavid S. Miller <davem@davemloft.net>2013-09-24 14:39:58 (GMT)
commit086293542b991fb88a2e41ae7b4f82ac65a20e1a (patch)
tree5f868e340b74cc03ee7f7f19fd12af0c08a422a8 /net/ipv4/tcp_input.c
parent8c27bd75f04fb9cb70c69c3cfe24f4e6d8e15906 (diff)
downloadlinux-fsl-qoriq-086293542b991fb88a2e41ae7b4f82ac65a20e1a.tar.xz
tcp: syncookies: reduce mss table to four values
Halve mss table size to make blind cookie guessing more difficult. This is sad since the tables were already small, but there is little alternative except perhaps adding more precise mss information in the tcp timestamp. Timestamps are unfortunately not ubiquitous. Guessing all possible cookie values still has 8-in 2**32 chance. Reported-by: Jakob Lell <jakob@jakoblell.com> Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv4/tcp_input.c')
0 files changed, 0 insertions, 0 deletions