On Thu, 2015-12-10 at 12:26 +0000, David Laight wrote: > Yes, I'm worried about whether our M3UA code is likely to crash customer > systems, not whether hostile applications can crash it. > These boxes ought to be on private networks since the sigtran protocols > themselves have nothing that even gives a hint of security.
As long as the listener socket is kept as is, meaning that the only use of it is the poll()/select()/accept() system calls, you are safe. The bug is about having a fuzzer, specifically playing games with multi threads so that the listener ipv6 options are changed after accept(). This should not really happen in real world applications : If ipv6 options need to be set on listener, they are set before first accept() is performed, and not unset until application exits and kill all sessions. BTW, are you even using IPv6 SCTP sessions ? -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
