blackbeard420/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf synced 2025-03-10 01:29:21 -04:00
Code Issues Projects Releases Wiki Activity

lwip: provide configuration option to enable TCP ISN hook

Browse Source
This commit is contained in:
Mahavir Jain 2020-10-15 19:10:11 +05:30
parent 591606ba59
commit 3689b94882
4 changed files with 33 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
components/lwip/CMakeLists.txt
View File

@ -4,6 +4,7 @@ set(include_dirs
lwip/src/include
port/esp32/include
port/esp32/include/arch
port/esp32/tcp_isn
)
set(srcs
@ -129,6 +130,10 @@ if(CONFIG_ETH_ENABLED)
list(APPEND srcs "port/esp32/netif/ethernetif.c")
endif()
if(CONFIG_LWIP_TCP_ISN_HOOK)
list(APPEND srcs "port/esp32/tcp_isn/tcp_isn.c")
endif()
idf_component_register(SRCS "${srcs}"
INCLUDE_DIRS "${include_dirs}"
LDFRAGMENTS linker.lf

11
components/lwip/Kconfig
View File

@ -309,6 +309,17 @@ menu "LWIP"
menu "TCP"
config LWIP_TCP_ISN_HOOK
bool "Enable TCP ISN Hook"
default y
help
Enables custom TCP ISN hook to randomize initial sequence
number in TCP connection. This is recommended as default
lwIP implementation (`tcp_next_iss`) is not very strong,
as it does not take into consideration any platform
specific entropy source.
config LWIP_MAX_ACTIVE_TCP
int "Maximum active TCP Connections"
range 1 1024

7
components/lwip/component.mk
View File

@ -8,7 +8,8 @@ COMPONENT_ADD_INCLUDEDIRS := \
include/apps/sntp \
lwip/src/include \
port/esp32/include \
port/esp32/include/arch
port/esp32/include/arch \
port/esp32/tcp_isn
COMPONENT_SRCDIRS := \
apps/dhcpserver \
@ -34,6 +35,10 @@ ifdef CONFIG_LWIP_PPP_SUPPORT
COMPONENT_SRCDIRS += lwip/src/netif/ppp lwip/src/netif/ppp/polarssl
endif
ifdef CONFIG_LWIP_TCP_ISN_HOOK
COMPONENT_SRCDIRS += port/esp32/tcp_isn
endif
CFLAGS += -Wno-address # lots of LWIP source files evaluate macros that check address of stack variables
lwip/src/netif/ppp/ppp.o: CFLAGS += -Wno-uninitialized

11
components/lwip/port/esp32/include/lwipopts.h
View File

@ -406,6 +406,17 @@
*/
#define LWIP_TCP_RTO_TIME CONFIG_LWIP_TCP_RTO_TIME
/**
* Set TCP hook for Initial Sequence Number (ISN)
*/
#ifdef CONFIG_LWIP_TCP_ISN_HOOK
#include <lwip/arch.h>
struct ip_addr;
u32_t lwip_hook_tcp_isn(const struct ip_addr *local_ip, u16_t local_port,
const struct ip_addr *remote_ip, u16_t remote_port);
#define LWIP_HOOK_TCP_ISN lwip_hook_tcp_isn
#endif
/*
----------------------------------
---------- Pbuf options ----------