From owner-freebsd-security  Fri Nov 21 16:43:06 1997
Return-Path: <owner-freebsd-security>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.7/8.8.7) id QAA28673
          for security-outgoing; Fri, 21 Nov 1997 16:43:06 -0800 (PST)
          (envelope-from owner-freebsd-security)
Received: from biggusdiskus.flyingfox.com (biggusdiskus.flyingfox.com [206.14.52.27])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id QAA28665
          for <security@freebsd.org>; Fri, 21 Nov 1997 16:43:03 -0800 (PST)
          (envelope-from jas@flyingfox.com)
Received: (from jas@localhost)
	by biggusdiskus.flyingfox.com (8.8.5/8.8.5) id QAA05351;
	Fri, 21 Nov 1997 16:44:11 -0800 (PST)
Date: Fri, 21 Nov 1997 16:44:11 -0800 (PST)
From: Jim Shankland <jas@flyingfox.com>
Message-Id: <199711220044.QAA05351@biggusdiskus.flyingfox.com>
To: fenner@parc.xerox.com
Subject: Re: new TCP/IP bug in win95 (fwd)
Cc: security@freebsd.org
Sender: owner-freebsd-security@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

Bill Fenner <fenner@parc.xerox.com> writes:

> Jim Shankland <jas@flyingfox.com> wrote:
> >I'm not convinced (yet).  How could you ever implement this?  Each
> >endpoint of a TCP circuit needs a state structure (the TCB).  So such
> >a connection (like any TCP connection) would have 2 TCB's
> 
> Nope.  This program creates a self-connection with only one TCB
> involved.

Heh.  Right you are.  Live and learn.

Jim Shankland
Flying Fox Computer Systems, Inc.