Define "connected" as

  "when SYN is ACKed and we have already received SYN", or
  "when SYN is received and we have already had SYN ACKed"

rather than just

  "when SYN is ACKed"

This avoids spuriously calling the connected() method when we receive
a RST,ACK in response to a SYN.

src/net/tcp.c

  * @ret rc		Return status code
  */
 static int tcp_rx_syn ( struct tcp_connection *conn, uint32_t seq ) {
+	struct tcp_application *app = conn->app;
 
 	/* Synchronise sequence numbers on first SYN */
 	if ( ! ( conn->tcp_state & TCP_STATE_RCVD ( TCP_SYN ) ) )
 	/* Acknowledge SYN */
 	conn->rcv_ack++;
 
+	/* Notify application of established connection, if applicable */
+	if ( ( conn->tcp_state & TCP_STATE_ACKED ( TCP_SYN ) ) &&
+	     app && app->tcp_op->connected )
+		app->tcp_op->connected ( app );
+
 	return 0;
 }
 
 		conn->tcp_state |= TCP_STATE_ACKED ( acked_flags );
 
 	/* Notify application of established connection, if applicable */
-	if ( ( acked_flags & TCP_SYN ) && app && app->tcp_op->connected )
+	if ( ( acked_flags & TCP_SYN ) &&
+	     ( conn->tcp_state & TCP_STATE_RCVD ( TCP_SYN ) ) &&
+	     app && app->tcp_op->connected )
 		app->tcp_op->connected ( app );
 
 	return 0;