On Wed, 8 Jul 2009, sth...@nethelp.no wrote:
According to the comments for rev. 1.10 of netinet/ip_id.c, from http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/netinet/ip_id.c this is to be MFCed after 2 weeks (i.e. 2 weeks after 6. February 2008). And yet here we are in July 2009, and 7-STABLE shows no sign of this version of the IP id generation code but instead has the version that Amit Klein showed had problems, http://www.trusteer.com/docs/OpenBSD_DNS_Cache_Poisoning_and_Multiple_OS_Predictable_IP_ID_Vulnerability.pdf Is this a deliberate choice? Steinar Haug, Nethelp consulting, sth...@nethelp.no
This is a case of me losing track of time and not getting around to the merge. As far as I know the code in question works properly. I will try to merge it soon. If another committer would like to handle the merge for me to get it done sooner, please speak up. :)
Sorry for the delay, Mike "Silby" Silbersack _______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"