RFC Errata
RFC 9260, "Stream Control Transmission Protocol", June 2022
Source of RFC: tsvwg (wit)
Errata ID: 7852
Status: Reported
Type: Technical
Publication Format(s) : TEXT
Reported By: Michael Tüxen
Date Reported: 2024-03-15
Section 8.5 says:
When receiving an SCTP packet, the endpoint MUST ensure that the value in the Verification Tag field of the received SCTP packet matches its own tag.
It should say:
When receiving an SCTP packet, the endpoint MUST first ensure that the value in the Verification Tag field of the received SCTP packet matches its own tag before processing any chunks or changing its state.
Notes:
State explicitly that the check of the verification tag needs to be done before any processing of the packet.
Thanks to Jake Ginesin, Max von Hippel, and Cristina Nita-Rotaru for reporting issue and discussing it with me.