From owner-cvs-usrsbin  Thu Apr 11 01:15:01 1996
Return-Path: owner-cvs-usrsbin
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id BAA22294
          for cvs-usrsbin-outgoing; Thu, 11 Apr 1996 01:15:01 -0700 (PDT)
Received: (from davidg@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id BAA22269
          Thu, 11 Apr 1996 01:14:47 -0700 (PDT)
Date: Thu, 11 Apr 1996 01:14:47 -0700 (PDT)
From: David Greenman <davidg>
Message-Id: <199604110814.BAA22269@freefall.freebsd.org>
To: CVS-committers, cvs-all, cvs-usrsbin
Subject: cvs commit:  src/usr.sbin/ppp slcompress.c
Sender: owner-cvs-usrsbin@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

davidg      96/04/11 01:14:46

  Modified:    usr.sbin/ppp  slcompress.c
  Log:
  Bugfix based on a kernel fix:
  
  When PPP gets an uncompressed packet, it attempts to save off the TCP/IP
  header for use in decompressing subsequant packets. If PPP gets garbage
  (such as what happens when there is a port speed mismatch or modem line
  noise), it will occasionally mistake the packet as a valid uncompressed
  packet. When it tries to save off the header, it doesn't bother to check
  for the validity of the header length and will happily clobber not only
  the PPP VJC data structure, but parts of other process memory that happens
  to follow it...causing, ahem, undesired behavior.
  
  Revision  Changes    Path
  1.5       +12 -5     src/usr.sbin/ppp/slcompress.c