Date: Wed, 10 Apr 1996 23:46:26 -0700 (PDT) From: David Greenman <davidg> To: CVS-committers, cvs-all, cvs-sys Subject: cvs commit: src/sys/net slcompress.c Message-ID: <199604110646.XAA15145@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
davidg 96/04/10 23:46:26 Modified: sys/net slcompress.c Log: When cslip gets an uncompressed packet, it attempts to save off the TCP/IP header for use in decompressing subsequant packets. If cslip gets garbage (such as what happens when there is a port speed mismatch or modem line noise), it will occasionally mistake the packet as a valid uncompressed packet. When it tries to save off the header, it doesn't bother to check for the validity of the header length and will happily clobber not only the cslip data structure, but parts of other kernel memory that happens to follow it...causing, ahem, undesired behavior. Revision Changes Path 1.7 +11 -4 src/sys/net/slcompress.c
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199604110646.XAA15145>