Re: inet_diag insufficient validation?
From: Dan Rosenberg <hidden>
Date: 2011-06-01 15:50:27
On Wed, 2011-06-01 at 11:40 -0400, Dan Rosenberg wrote:
Once the bytecode is actually run in inet_diag_bc_run(), it looks like more infinite loops are possible, if appropriate "yes" or "no" values are set to zero and weren't validated by the audit.
On second glance, there don't appear to be any infinite loops at runtime (but the audit loop seems real). Thanks to Nelson Elhage for setting me straight. -Dan