From: Brandon L Black <blblack@gmail.com>
Date: Sat, 13 Nov 2010 18:05:51 +0000 (-0600)
Subject: Improved handling of queue-jumping packets on receive
X-Git-Tag: release-1.0.14~28
X-Git-Url: https://tinc-vpn.org/git/browse?p=tinc;a=commitdiff_plain;h=0d61d4ae1358553fc8dde350747542f137f5cb8b

Improved handling of queue-jumping packets on receive
---

diff --git a/src/net_packet.c b/src/net_packet.c
index b35f72d4..9c551299 100644
--- a/src/net_packet.c
+++ b/src/net_packet.c
@@ -298,9 +298,13 @@ static void receive_udppacket(node_t *n, vpn_packet_t *inpkt) {
 	if(replaywin) {
 		if(inpkt->seqno != n->received_seqno + 1) {
 			if(inpkt->seqno >= n->received_seqno + replaywin * 8) {
+				if(n->farfuture++ < replaywin >> 2) {
+					logger(LOG_WARNING, "Packet from %s (%s) is %d seqs in the future, dropped (%u)",
+						n->name, n->hostname, inpkt->seqno - n->received_seqno - 1, n->farfuture);
+					return;
+				}
 				logger(LOG_WARNING, "Lost %d packets from %s (%s)",
 					   	inpkt->seqno - n->received_seqno - 1, n->name, n->hostname);
-				
 				memset(n->late, 0, replaywin);
 			} else if (inpkt->seqno <= n->received_seqno) {
 				if((n->received_seqno >= replaywin * 8 && inpkt->seqno <= n->received_seqno - replaywin * 8) || !(n->late[(inpkt->seqno / 8) % replaywin] & (1 << inpkt->seqno % 8))) {
@@ -313,7 +317,8 @@ static void receive_udppacket(node_t *n, vpn_packet_t *inpkt) {
 					n->late[(i / 8) % replaywin] |= 1 << i % 8;
 			}
 		}
-	
+
+		n->farfuture = 0;
 		n->late[(inpkt->seqno / 8) % replaywin] &= ~(1 << inpkt->seqno % 8);
 	}
 
diff --git a/src/node.h b/src/node.h
index de0f8c83..7bac28e3 100644
--- a/src/node.h
+++ b/src/node.h
@@ -77,6 +77,7 @@ typedef struct node_t {
 
 	uint32_t sent_seqno;			/* Sequence number last sent to this node */
 	uint32_t received_seqno;		/* Sequence number last received from this node */
+	uint32_t farfuture;			/* Packets in a row that have arrived from the far future */
 	unsigned char* late;			/* Bitfield marking late packets */
 
 	length_t mtu;				/* Maximum size of packets to send to this node */