From owner-svn-src-all@freebsd.org Wed Jul 29 18:43:42 2015 Return-Path: Delivered-To: svn-src-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A32C29AE4D1 for ; Wed, 29 Jul 2015 18:43:42 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Received: from mail-qg0-f54.google.com (mail-qg0-f54.google.com [209.85.192.54]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 584913C6 for ; Wed, 29 Jul 2015 18:43:41 +0000 (UTC) (envelope-from shawn.webb@hardenedbsd.org) Received: by qgeu79 with SMTP id u79so8927962qge.1 for ; Wed, 29 Jul 2015 11:43:35 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:to:cc:subject:date:message-id:organization :user-agent:in-reply-to:references:mime-version:content-type; bh=K7OcXmxMsB6Od0rr77H66WPkr3zzKVn4T5ybJAcFz80=; b=WfzSjgamuTvMPFocyX/S/ILy4th8BIkV1VhuL6RsHFXdLYp3vTv6kfp2Cqs2lFCChr 4cS96T2aXYhAS6KjjXOcVb7vZIcwXvPrNHsCngVdEY7+huvzZw2Gw/+hBV3tciRmc7P7 /2QDwHThYlV1cgpOQ8ingqQA/9qR61/EJILlJtQ8AmFK7aIg4UN4iTz3MeReiqT9aE32 xco9RJ0IBT9GIpiov+0igH9uF7CoFKsVba77p4UlM+uuWsHUlbTVN4r5bv1mmHV3S4iQ 11yHL5tJn9KfF2+txX6hF/IvwKVXaUR5Hry+Zpe8WVcjua2cgzCC1rw8jrKBCp2iscqL YVYw== X-Gm-Message-State: ALoCoQkTtMFN3Wx2I1no279m5f6DGFhftk0mRhvwFQyoLfERB5P1VRs+dIRYxZnA08yLocv1U8jNcYvm6pkKUL3qd8Ndelyzpk5TwQG1CZwwl96pC3WII/W37UgmFpQunPFhSdNbYhRw+bN8SQ8osQj4BLOY0Y+nGbt8mZc1GBXPrLTy7pyOWLi5Asp1n7PTnxxAYqMEdzpJ X-Received: by 10.140.83.84 with SMTP id i78mr64696327qgd.14.1438195415707; Wed, 29 Jul 2015 11:43:35 -0700 (PDT) Received: from hbsd-dev-laptop.localnet ([136.160.244.66]) by smtp.gmail.com with ESMTPSA id q26sm14384187qkq.33.2015.07.29.11.43.34 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 29 Jul 2015 11:43:34 -0700 (PDT) From: Shawn Webb To: svn-src-all@freebsd.org Cc: Patrick Kelsey , src-committers@freebsd.org, svn-src-head@freebsd.org Subject: Re: svn commit: r286027 - in head/sys: netinet sys Date: Wed, 29 Jul 2015 14:43:31 -0400 Message-ID: <1544505.mLGqfis2xi@hbsd-dev-laptop> Organization: HardenedBSD User-Agent: KMail/4.14.3 (FreeBSD/11.0-CURRENT-HBSD; KDE/4.14.3; amd64; ; ) In-Reply-To: <201507291759.t6THxEZ2061562@repo.freebsd.org> References: <201507291759.t6THxEZ2061562@repo.freebsd.org> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextPart2162866.BYog7Hna3T"; micalg="pgp-sha256"; protocol="application/pgp-signature" X-BeenThere: svn-src-all@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "SVN commit messages for the entire src tree \(except for " user" and " projects" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jul 2015 18:43:42 -0000 --nextPart2162866.BYog7Hna3T Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="us-ascii" On Wednesday, 29 July 2015 05:59:14 PM Patrick Kelsey wrote: > Author: pkelsey > Date: Wed Jul 29 17:59:13 2015 > New Revision: 286027 > URL: https://svnweb.freebsd.org/changeset/base/286027 >=20 > Log: > Revert r265338, r271089 and r271123 as those changes do not handle > non-inline urgent data and introduce an mbuf exhaustion attack vect= or > similar to FreeBSD-SA-15:15.tcp, but not requiring VNETs. >=20 > Address the issue described in FreeBSD-SA-15:15.tcp. >=20 > Reviewed by:=09glebius > Approved by:=09so > Approved by:=09jmallett (mentor) > Security:=09FreeBSD-SA-15:15.tcp > Sponsored by:=09Norse Corp, Inc. Does this commit need to be MFC'd to stable/10? Or is this only for HEA= D? Thanks, =2D-=20 Shawn Webb HardenedBSD GPG Key ID: 0x6A84658F52456EEE GPG Key Fingerprint: 2ABA B6BD EF6A F486 BE89 3D9E 6A84 658F 5245 6EEE --nextPart2162866.BYog7Hna3T Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAABCAAGBQJVuR7TAAoJEGqEZY9SRW7uSB8P/2S4Sn98K9EaL2M8et/Oyoaz JmY76DKgUNHudpVZo5eSh+XtsINHevn8re/QB97jORl3GJ6hre/AaexJtFvFN1+N kTUEROqgtW3UWGlHijQzuE+p1OwPNdjFZPm4bWP23fKfQgdvZ26cg+iyPqiZ14bc phpIZdsC0aHp9tvPT9QcdKWOwaTGEQ2f3sbIvf2Gg0Qpu0bnsqk5UfVUtUKgPkP7 lM54uKlJqVVo25NG1wayE4GF7X0LrQzZlXet7kNZHyqPAu5s9rHOHD+8w9i6dQkf zk22BsLTxtlTqejVilQF2BLXhx56Wf1P1ZVi0qkbanAAzPIw82P3w8HLjaX0cTed 7kS/GIFm2XFgpO+It4rsYEXpj8vCEBhgipaMQVyuCp8742s4qoFc6cjBVueeAvR/ dlI4YznTTxlG6IJXw0jUwH3cCYEv1oG8j6K6ZzpCZFrFMg8CPZMtwdV7kaH5Qsii QhDt+FZ55FFIlaIjtOe9xAFzQu2GxcJ7Zu25wNgR5PfboaqT0f+TPlykX8z9CgwX h3eujk7eu/dxu+QAD/HglDNOktt4LQZ6bJE6mfBAommPIXUTL31mQhJjdBlRP40Q nPEfozaWq/8wBByLdpzkOirJiOz8lb/bsDami6ihNLLFF5fB4sBFUHpj7k1bIk3A Lnf9HVY7gxcIoIvgmD1u =qpxh -----END PGP SIGNATURE----- --nextPart2162866.BYog7Hna3T--