> Isn't this a huge problem for ordinary users on a system?? I mean
> there aren't any user restrictions on sockets right? I imagine
> there will be some sort of follow up on this exploit?
Well, there is a 256k limit per socket of the buffer (I & O), try
sysctl kern.maxsockbuf and you can limit the number of sockets with
the maximum number of filedescriptors per process (ulimit -a), but that's
just not safe enough.
It seems that the kernel doesn't check wether the space it wants to
allocate still exists or not.
Marc
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-stable" in the body of the message