tipc: add sequence number check for link STATE messages
Some switch infrastructures produce huge amounts of packet duplicates. This becomes a problem if those messages are STATE/NACK protocol messages, causing unnecessary retransmissions of already accepted packets. We now introduce a unique sequence number per STATE protocol message so that duplicates can be identified and ignored. This will also be useful when tracing such cases, and to avert replay attacks when TIPC is encrypted. For compatibility reasons we have to introduce a new capability flag TIPC_LINK_PROTO_SEQNO to handle this new feature. Signed-off-by: Jon Maloy <jon.maloy@ericsson.com> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:

committed by
David S. Miller

parent
e32f55f373
commit
9012de5089
@@ -363,6 +363,8 @@ static struct tipc_node *tipc_node_create(struct net *net, u32 addr,
|
||||
{
|
||||
struct tipc_net *tn = net_generic(net, tipc_net_id);
|
||||
struct tipc_node *n, *temp_node;
|
||||
struct tipc_link *l;
|
||||
int bearer_id;
|
||||
int i;
|
||||
|
||||
spin_lock_bh(&tn->node_list_lock);
|
||||
@@ -370,6 +372,11 @@ static struct tipc_node *tipc_node_create(struct net *net, u32 addr,
|
||||
if (n) {
|
||||
/* Same node may come back with new capabilities */
|
||||
n->capabilities = capabilities;
|
||||
for (bearer_id = 0; bearer_id < MAX_BEARERS; bearer_id++) {
|
||||
l = n->links[bearer_id].link;
|
||||
if (l)
|
||||
tipc_link_update_caps(l, capabilities);
|
||||
}
|
||||
goto exit;
|
||||
}
|
||||
n = kzalloc(sizeof(*n), GFP_ATOMIC);
|
||||
|
Reference in New Issue
Block a user