commit ab86f86e7c29393fa1da81b5f86296bd5fcb7420
author Florin Coras <fcoras@cisco.com> Thu Dec 06 18:24:19 2018 -0800
committer Damjan Marion <dmarion@me.com> Fri Dec 07 15:08:58 2018 +0000
tree d410676822b9b51d226cdafe09c98548dbbedfd8
parent df0847831715ef0f639a6d8e79468cd1e2341cd6

tcp: improve check for invalid sack blocks

Change-Id: Ic6a6202a2d5aca33eee7fc6ff8eeaa1db9b58525
Signed-off-by: Florin Coras <fcoras@cisco.com>

src/vnet/tcp/tcp_input.c

diff --git a/src/vnet/tcp/tcp_input.c b/src/vnet/tcp/tcp_input.c
index 0e91550..dff1802 100644
--- a/src/vnet/tcp/tcp_input.c
+++ b/src/vnet/tcp/tcp_input.c
@@ -905,7 +905,9 @@
     {
       if (seq_lt (blk->start, blk->end)
 	  && seq_gt (blk->start, tc->snd_una)
-	  && seq_gt (blk->start, ack) && seq_leq (blk->end, tc->snd_una_max))
+	  && seq_gt (blk->start, ack)
+	  && seq_lt (blk->start, tc->snd_una_max)
+	  && seq_leq (blk->end, tc->snd_una_max))
 	{
 	  blk++;
 	  continue;