netfilter: Fix handling simultaneous open in TCP conntrack
authorJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Sat, 21 Apr 2018 11:43:48 +0000 (13:43 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 26 Apr 2018 22:39:29 +0000 (00:39 +0200)
commit72d4d3e3980702809509586d36015b7c3c51fad4
tree0b50708c4b2c4183f0230ba603393ecd8a85145a
parent25eb0ea7174c6e84f21fa59dccbddd0318b17b12
netfilter: Fix handling simultaneous open in TCP conntrack

Dominique Martinet reported a TCP hang problem when simultaneous open was used.
The problem is that the tcp_conntracks state table is not smart enough
to handle the case. The state table could be fixed by introducing a new state,
but that would require more lines of code compared to this patch, due to the
required backward compatibility with ctnetlink.

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Reported-by: Dominique Martinet <asmadeus@codewreck.org>
Tested-by: Dominique Martinet <asmadeus@codewreck.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/uapi/linux/netfilter/nf_conntrack_tcp.h
net/netfilter/nf_conntrack_proto_tcp.c