From owner-freebsd-security@freebsd.org  Thu Jul 23 21:56:14 2015
Return-Path: <owner-freebsd-security@freebsd.org>
Delivered-To: freebsd-security@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 989889A8D04
 for <freebsd-security@mailman.ysv.freebsd.org>;
 Thu, 23 Jul 2015 21:56:14 +0000 (UTC) (envelope-from slw@zxy.spb.ru)
Received: from zxy.spb.ru (zxy.spb.ru [195.70.199.98])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 566301040
 for <freebsd-security@freebsd.org>; Thu, 23 Jul 2015 21:56:14 +0000 (UTC)
 (envelope-from slw@zxy.spb.ru)
Received: from slw by zxy.spb.ru with local (Exim 4.84 (FreeBSD))
 (envelope-from <slw@zxy.spb.ru>)
 id 1ZIOTK-0005yl-8c; Fri, 24 Jul 2015 00:56:10 +0300
Date: Fri, 24 Jul 2015 00:56:10 +0300
From: Slawa Olhovchenkov <slw@zxy.spb.ru>
To: d@delphij.net
Cc: freebsd-security@freebsd.org
Subject: Re: FreeBSD Security Advisory FreeBSD-SA-15:13.tcp
Message-ID: <20150723215610.GR44094@zxy.spb.ru>
References: <20150722025746.721831C32@freefall.freebsd.org>
 <20150722131856.GD43740@zxy.spb.ru> <55B140B5.8050904@delphij.net>
 <20150723204803.GE43740@zxy.spb.ru> <55B15DAB.7030905@delphij.net>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <55B15DAB.7030905@delphij.net>
User-Agent: Mutt/1.5.23 (2014-03-12)
X-SA-Exim-Connect-IP: <locally generated>
X-SA-Exim-Mail-From: slw@zxy.spb.ru
X-SA-Exim-Scanned: No (on zxy.spb.ru); SAEximRunCond expanded to false
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Jul 2015 21:56:14 -0000

On Thu, Jul 23, 2015 at 02:33:31PM -0700, Xin Li wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
> 
> (Bcc'ed some unnamed patch authors so they can correct me if I was wrong
> ).
> 
> On 07/23/15 13:48, Slawa Olhovchenkov wrote:
> > On Thu, Jul 23, 2015 at 12:29:57PM -0700, Xin Li wrote:
> > 
> >> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
> >> 
> >> On 07/22/15 06:18, Slawa Olhovchenkov wrote:
> >>> On Wed, Jul 22, 2015 at 02:57:46AM +0000, FreeBSD Security 
> >>> Advisories wrote:
> >>> 
> >>> This is correspondent to kern/25986? Or kern/25986 is
> >>> different bug?
> >> 
> >> I think it's the same bug.
> > 
> > I see patch in kern/25986 is different from SA. May be SA close not
> > all issuses?
> 
> Yes they are different, but I think that one and r284941 (MFC'ed to
> stable/10 as r285793) should have addressed all possible situations.

: When TCP socket goes to LAST_ACK state & remote host do not respone
: ACK forever, socket would stay at LAST_ACK forever and never be
: removed.

This situation too? Regardless of zero window condition?