Date: Sat, 2 Mar 2002 12:23:50 -0800 From: Luigi Rizzo <rizzo@icir.org> To: "Crist J. Clark" <cjc@FreeBSD.ORG> Cc: Leo Bicknell <bicknell@ufp.org>, Bob Bishop <rb@gid.co.uk>, "George V. Neville-Neil" <gnn@neville-neil.com>, Doug Ambrisko <ambrisko@ambrisko.com>, hackers@FreeBSD.ORG Subject: Re: Multicast problem with sis interface? Message-ID: <20020302122350.A49121@iguana.icir.org> In-Reply-To: <20020302121233.G66092@blossom.cjclark.org> References: <200203010557.VAA1802420@meer.meer.net> <rb@gid.co.uk> <4.3.2.7.2.20020222165515.00c14850@gid.co.uk> <200203010557.VAA1802420@meer.meer.net> <4.3.2.7.2.20020301112956.00c5b550@gid.co.uk> <20020301035623.A32974@iguana.icir.org> <20020301184123.GA5908@ussenterprise.ufp.org> <20020302121233.G66092@blossom.cjclark.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Mar 02, 2002 at 12:12:33PM -0800, Crist J. Clark wrote: > > > ok, these three drivers behave as follows: ... > > > "ed" pads with whatever is left in the transmit buffer from > > > earlier transmissions; > > > "vr" pads with whatever is available in the mbuf after the actual data; > > > > I point out both of these are security risks. Granted, fairly > > minor, but they allow someone to get all/part of a previous packet's > > data, when they should have it. This sort of thing has been used ... > The only "people" who can see the leftover stuff are the same ones who > could have seen the original packet (the exception being very simple not in the "vr" case, because the junk comes from the mbuf. Which could have stored something else in the past, not just a packet previously gone out on the same interface. cheers luigi To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020302122350.A49121>