Module Name:	src
Committed By:	matt
Date:		Fri Dec 21 18:58:56 UTC 2007

Modified Files:
	src/sys/netinet: ip_input.c

Log Message:
Prevent TCP blind data attacks by not allowing non-initial fragments to
start at less than 68 bytes (minimal fragment size).


To generate a diff of this commit:
cvs rdiff -r1.257 -r1.258 src/sys/netinet/ip_input.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.