| commit | fb128b7ad8b45eb7861b2974a03ef2cb7c24b7c8 | [log] [tgz] |
|---|---|---|
| author | Jeff Martin <martinjeffrey@fuchsia.infra.roller.google.com> | Mon Mar 31 11:14:03 2025 -0700 |
| committer | Copybara-Service <copybara-worker@google.com> | Mon Mar 31 11:17:04 2025 -0700 |
| tree | d2acf887d319d528632b86e680f18e35d16ac84c | |
| parent | eb1387423cd7453a8b61899c22afc11a9bcb85a9 [diff] |
[roll] Roll fuchsia [netstack3] Send ICMP Port Unreachable from UDP Originally, Port Unreachable messages were not sent by the netstack. The rationale was to avoid contributing to a reflection DOS attack, in which the attack performs a UDP port scan on the netstack, causing us to send a large volume of ICMP Port Unreachable errors to the victim. This attack vector is not a substantial concern, because the netstack's ICMP implementation enforces a rate limit on the amount of ICMP errors that can be sent. This is in line with the behavior of other platforms. Original-Bug: 406666070 Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1239544 Original-Revision: a452e24d9eae9a259e3e5eed540668d65829f61c GitOrigin-RevId: 0d2bde6c760bd8879eb440d7eeb2786f3ac2b359 Change-Id: I83e6b78a0f85a135722092274f5473c5b388382f
This repository contains Fuchsia's Global Integration manifest files.
All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.
Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.
First install Jiri.
Next run:
$ jiri init $ jiri import minimal https://fuchsia.googlesource.com/integration $ jiri update
Third party projects should have their own subdirectory in ./third_party.