pf: remove incorrect fragmentation check
authorKristof Provost <kp@FreeBSD.org>
Wed, 29 Nov 2023 18:06:31 +0000 (19:06 +0100)
committerMark Johnston <markj@FreeBSD.org>
Tue, 5 Dec 2023 18:19:20 +0000 (13:19 -0500)
commit6284d5f76d6bd2d97fe287c5adabf59c79688eda
tree17f4d99e9eee8426099fd6d80a8699abdf4cadab
parent62d47a4db4579315d7b89002d7de696b44ae1415
pf: remove incorrect fragmentation check

We do not need to check PFDESC_IP_REAS while tracking TCP state.
Moreover, this check incorrectly considers no-data packets (e.g. RST) to
be in-window when this flag is not set.

Sponsored by: Rubicon Communications, LLC ("Netgate")
Approved by: so
Security: FreeBSD-SA-23:17.pf
sys/netpfil/pf/pf.c