From owner-freebsd-hackers  Fri Mar  1 10:47:15 2002
Delivered-To: freebsd-hackers@freebsd.org
Received: from iguana.icir.org (iguana.icir.org [192.150.187.36])
	by hub.freebsd.org (Postfix) with ESMTP id 6B80337B405
	for <hackers@FreeBSD.ORG>; Fri,  1 Mar 2002 10:47:12 -0800 (PST)
Received: (from rizzo@localhost)
	by iguana.icir.org (8.11.6/8.11.3) id g21Il5K36984;
	Fri, 1 Mar 2002 10:47:05 -0800 (PST)
	(envelope-from rizzo)
Date: Fri, 1 Mar 2002 10:47:05 -0800
From: Luigi Rizzo <rizzo@icir.org>
To: Leo Bicknell <bicknell@ufp.org>
Cc: Bob Bishop <rb@gid.co.uk>,
	"George V. Neville-Neil" <gnn@neville-neil.com>,
	Doug Ambrisko <ambrisko@ambrisko.com>, hackers@FreeBSD.ORG
Subject: Re: Multicast problem with sis interface?
Message-ID: <20020301104705.A36640@iguana.icir.org>
References: <200203010557.VAA1802420@meer.meer.net> <rb@gid.co.uk> <4.3.2.7.2.20020222165515.00c14850@gid.co.uk> <200203010557.VAA1802420@meer.meer.net> <4.3.2.7.2.20020301112956.00c5b550@gid.co.uk> <20020301035623.A32974@iguana.icir.org> <20020301184123.GA5908@ussenterprise.ufp.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20020301184123.GA5908@ussenterprise.ufp.org>
User-Agent: Mutt/1.3.23i
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-hackers.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-hackers>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-hackers>
X-Loop: FreeBSD.ORG

On Fri, Mar 01, 2002 at 01:41:23PM -0500, Leo Bicknell wrote:
> In a message written on Fri, Mar 01, 2002 at 03:56:23AM -0800, Luigi Rizzo wrote:
> > ok, these three drivers behave as follows:
> > 
> >  "ed" pads with whatever is left in the transmit buffer from
> >       earlier transmissions;
> >  "vr" pads with whatever is available in the mbuf after the actual data;
> 
> I point out both of these are security risks.  Granted, fairly

I know, that is why i mentioned that. In fact i think i raised the
subject long ago about this misbehaviour in some driver, maybe "dc".

0's or 1's are perfectly fine as padding, no need to put random
stuff, especially given that from the header fields it is in most
cases pretty obvious to find out what is the actual payload.

	cheers
	luigi

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message