Date: Wed, 08 Jul 2009 14:16:30 +0200 (CEST) From: sthaug@nethelp.no To: freebsd-net@freebsd.org Subject: Missing MFC of Silbersack/Klein IP id generation? Message-ID: <20090708.141630.78743642.sthaug@nethelp.no>
next in thread | raw e-mail | index | archive | help
According to the comments for rev. 1.10 of netinet/ip_id.c, from
http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet/ip_id.c
this is to be MFCed after 2 weeks (i.e. 2 weeks after 6. February 2008).
And yet here we are in July 2009, and 7-STABLE shows no sign of this
version of the IP id generation code but instead has the version that
Amit Klein showed had problems,
http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf
Is this a deliberate choice?
Steinar Haug, Nethelp consulting, sthaug@nethelp.no
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090708.141630.78743642.sthaug>