git: dd36606b1bc9 - main - sctp: improve sending of ABORT packets in response to INIT-ACKs

[Michael Tuexen]

The branch main has been updated by tuexen:

URL: 
https://cgit.FreeBSD.org/src/commit/?id=dd36606b1bc90d1459e0d04be4ea5859d3eabb16

commit dd36606b1bc90d1459e0d04be4ea5859d3eabb16
Author:     Michael Tuexen <tue...@freebsd.org>
AuthorDate: 2022-10-12 23:05:44 +0000
Commit:     Michael Tuexen <tue...@freebsd.org>
CommitDate: 2022-10-12 23:05:44 +0000

    sctp: improve sending of ABORT packets in response to INIT-ACKs
    
    Ensure that the initiate tag of the INIT-ACK chunk is used as the
    verification tag of the packet containing the ABORT chunk.
    
    Reported by:    Suganya Dharma
    MFC after:      1 week
---
 sys/netinet/sctp_input.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/sys/netinet/sctp_input.c b/sys/netinet/sctp_input.c
index 46b818c9983e..3f5046811258 100644
--- a/sys/netinet/sctp_input.c
+++ b/sys/netinet/sctp_input.c
@@ -412,7 +412,10 @@ sctp_process_init_ack(struct mbuf *m, int iphlen, int 
offset,
            &nat_friendly, &cookie_found);
        if (abort_flag) {
                /* Send an abort and notify peer */
-               sctp_abort_an_association(stcb->sctp_ep, stcb, op_err, false, 
SCTP_SO_NOT_LOCKED);
+               sctp_abort_association(stcb->sctp_ep, stcb, m, iphlen,
+                   src, dst, sh, op_err,
+                   mflowtype, mflowid,
+                   vrf_id, net->port);
                *abort_no_unlock = 1;
                return (-1);
        }