Re: kernel/1816: Repetable crashes of ipfilter code

["Denis A. Doroshenko" <d.doroshenko@omnitel.net>]

it may be because OpenBSD uses assembled in_cksum routine AFAIK. that
was done to improve performace...

so if ipfilter itself doesn't perform enough sanity checking, should
it be placed into in_cksum instead?

On Tue, May 08, 2001 at 02:31:03PM +0200, Camiel Dobbelaar wrote:
> 
> Another piece of the puzzle.
> 
> ipfilter is calling in_cksum(mbuf, hlen). Apparently the real length of
> the mbuf is shorter then hlen. (ie. not enough data). 
> 
> in_cksum in OpenBSD is the only one that panics in that situation. FreeBSD
> and NetBSD just put out a warning.
> 
> --
> Cam

-- 
Denis A. Doroshenko  [GPRS/IN/WAP, VAS group engineer] .-.        _|_  |
[Omnitel Ltd., T.Sevcenkos st. 25, Vilnius, Lithuania] | | _ _  _ .| _ |
[Phone: +370 9863486 E-mail: d.doroshenko@omnitel.net] |_|| | || |||(/_|_