CVS commit: src/sys/netinet

[Matt Thomas <matt%netbsd.org@localhost>]

Module Name:    src
Committed By:   matt
Date:           Fri Dec 21 18:58:56 UTC 2007

Modified Files:
        src/sys/netinet: ip_input.c

Log Message:
Prevent TCP blind data attacks by not allowing non-initial fragments to
start at less than 68 bytes (minimal fragment size).


To generate a diff of this commit:
cvs rdiff -r1.257 -r1.258 src/sys/netinet/ip_input.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.