On Saturday 15 December 2001 05:22, Oskar wrote: > On Sat, Dec 15, 2001 at 02:51:06AM -0500, Tavin Cole wrote: > <> > > > It turns out this is all a bit trickier than we thought.. > > > > Gianni's change, by throwing the EndOfRouteException, causes the node > > whose HTL gets decremented to zero due to automatic restarts to act as > > though it were the end node in a successful chain. This means > > DataNotFound/InsertReply is sent back. > > > > So for a situation where the client would expect to see RouteNotFound, > > she sees DataNotFound instead, and her inserts might actually wind up on > > far fewer nodes than the requested HTL. > > I don't agree at all, there is no guarantee that HTL of 20 will actually > reach 20 nodes, just that it will attempt to. A malicious node that > wishes to cut the request short can end the request right away by > sending a DataNotFound/InsertReply, so it's not an attack vector. > > When the HTL reaches zero, DNF/IR should be returned. No need to > complicate things. Oskar: Just to make sure I am following you, are you saying my fix is OK as is?
--gj -- Freesites (0.3) freenet:MSK at SSK@enI8YFo3gj8UVh-Au0HpKMftf6QQAgE/homepage// (0.4) freenet:SSK at npfV5XQijFkF6sXZvuO0o~kG4wEPAgM/homepage// _______________________________________________ Devl mailing list Devl at freenetproject.org http://lists.freenetproject.org/mailman/listinfo/devl
