Re: [tcpdump-workers] Core dump inside pcap optimizer. Snort 1.7 + libpcap-0.6.2

[itojun]

>Speaking of that code, it appears that
>could malfunction if "res->ai_family" is neither AF_INET nor AF_INET6
>(yes, perhaps that "should not happen", but sometimes stuff that "should
>not happen" happens anyway).  However, I'd expect it to crash in
>       backpatch(b0, b1->head);
>when it tries to dereference "b1", rather than blowing up in the bowels
>of the optimizer.

        now I remember... linux getaddrinfo may return AF_UNIX address under
        certain circumstances.  i'd add "default: continue;".

itojun
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe