On Sat, Mar 02, 2002 at 12:12:33PM -0800, Crist J. Clark wrote:
> > > ok, these three drivers behave as follows:
...
> > >  "ed" pads with whatever is left in the transmit buffer from
> > >       earlier transmissions;
> > >  "vr" pads with whatever is available in the mbuf after the actual data;
> > 
> > I point out both of these are security risks.  Granted, fairly
> > minor, but they allow someone to get all/part of a previous packet's
> > data, when they should have it.  This sort of thing has been used
...
> The only "people" who can see the leftover stuff are the same ones who
> could have seen the original packet (the exception being very simple

not in the "vr" case, because the junk comes from the mbuf. Which
could have stored something else in the past, not just a packet previously
gone out on the same interface.

        cheers
        luigi

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message

Reply via email to