diff options
Diffstat (limited to 'media')
| -rw-r--r-- | media/sctp/sctp_transport.cc | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/media/sctp/sctp_transport.cc b/media/sctp/sctp_transport.cc index 6be9461e91..35824b7f25 100644 --- a/media/sctp/sctp_transport.cc +++ b/media/sctp/sctp_transport.cc @@ -269,6 +269,11 @@ class SctpTransport::UsrSctpWrapper { // TODO(ldixon): Consider turning this on/off. usrsctp_sysctl_set_sctp_ecn_enable(0); + // WebRTC doesn't use these features, so disable them to reduce the + // potential attack surface. + usrsctp_sysctl_set_sctp_asconf_enable(0); + usrsctp_sysctl_set_sctp_auth_enable(0); + // This is harmless, but we should find out when the library default // changes. int send_size = usrsctp_sysctl_get_sctp_sendspace(); |