[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
CVS: cvs.openbsd.org: src
- To: source-changes_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org
- Subject: CVS: cvs.openbsd.org: src
- From: Jun-ichiro itojun Hagino <itojun_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org>
- Date: Sun, 9 Jul 2000 06:53:56 -0600 (MDT)
- Reply-to:
CVSROOT: /cvs
Module name: src
Changes by: itojun_(_at_)_cvs_(_dot_)_openbsd_(_dot_)_org 2000/07/09 06:53:56
Modified files:
sys/netinet : tcp_input.c
Log message:
be more cautious about tcp option length field. drop bogus ones earlier.
not sure if there is a real threat or not, but it seems that there's
possibility for overrun/underrun (like non-NOP option with optlen > cnt).
Visit your host, monkey.org