This is the mail archive of the libc-alpha@sourceware.org mailing list for the glibc project.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

Re: DoS in RPC implementation (CVE-2011-4069)

From: Roland McGrath <roland at hack dot frob dot com>
To: Aurelien Jarno <aurelien at aurel32 dot net>
Cc: Carlos O'Donell <carlos_odonell at mentor dot com>, Siddhesh Poyarekar <siddhesh at redhat dot com>, Jeff Law <law at redhat dot com>, libc-alpha at sourceware dot org, Martin Osvald <mosvald at redhat dot com>
Date: Wed, 6 Jun 2012 09:36:04 -0700 (PDT)
Subject: Re: DoS in RPC implementation (CVE-2011-4069)
References: <20120602201911.GA7099@volta.aurel32.net><4FCBE9AE.3030808@mentor.com><20120604121437.78f05d62@spoyarek><4FCCD40F.3060909@mentor.com><20120606162521.GA20961@volta.aurel32.net>

You're missing a space before paren in each __nanosleep call.

I think it would be better to have all those tail-call a common function
for "accept failed".  Then that one function can contain the common code,
and a verbose comment explaining its rationale.


Thanks,
Roland

References:
- DoS in RPC implementation (CVE-2011-4069)
  - From: Aurelien Jarno
- Re: DoS in RPC implementation (CVE-2011-4069)
  - From: Carlos O'Donell
- Re: DoS in RPC implementation (CVE-2011-4069)
  - From: Siddhesh Poyarekar
- Re: DoS in RPC implementation (CVE-2011-4069)
  - From: Carlos O'Donell
- Re: DoS in RPC implementation (CVE-2011-4069)
  - From: Aurelien Jarno

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]