Messages in this thread | | | From | Manfred <> | Subject | Re: Patch for DoS attack in ipc/msg.c | Date | Tue, 2 Nov 1999 06:03:49 -0500 (EST) |
| |
Scott wrote: > (note that struct msgbuf includes one byte for > the message text, so this should be safe) this is the user-space visible msgbuf structure, the actual structure is "msg_msg", defined at the beginning of ipc/msg.c. This structure does not contain that byte.
Could you wait until Friday? I'd like to check the POSIX standard: a zero-sized message contains a msgtype, and perhaps someone sends zero-sized messages with a special msgtype to recover from an overflown msgqueue?
Thanks for your bug report, Manfred
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |