On Oct 15, 2004, at 6:19 AM, Hannes Gredler wrote:
shouldn't we have upper/lower boundary checks for such a buffer ?
i.e. minbuffer 1.5K maxbuffer 128K
I think the BPF kernel code in most of the BSDs already impose upper and lower bounds; are you suggesting that libpcap impose its own bounds?
Note also that other OSes might also have the notion of a settable buffer size, and perhaps the other pcap-*.c files should also check the PCAP_BUFSIZE environment variable. Those OSes might, or might not, impose their own upper and lower bounds.
- This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
