Re: svn commit: r249903 - head/sys/netinet

2013-04-26 Thread Gleb Smirnoff
On Fri, Apr 26, 2013 at 01:24:12AM -0700, Adrian Chadd wrote: A> On 26 April 2013 01:17, Gleb Smirnoff wrote: A> > On Thu, Apr 25, 2013 at 11:33:33AM -0700, Adrian Chadd wrote: A> > A> .. is it possible to trigger a remote DoS through mbuf exhaustion A> > A> somehow by exploiting this? A> > A> > Y

Re: svn commit: r249903 - head/sys/netinet

2013-04-26 Thread Adrian Chadd
On 26 April 2013 01:17, Gleb Smirnoff wrote: > On Thu, Apr 25, 2013 at 11:33:33AM -0700, Adrian Chadd wrote: > A> .. is it possible to trigger a remote DoS through mbuf exhaustion > A> somehow by exploiting this? > > Yes, from a connected network. Think its worth a full security announcement?

Re: svn commit: r249903 - head/sys/netinet

2013-04-26 Thread Gleb Smirnoff
On Thu, Apr 25, 2013 at 11:33:33AM -0700, Adrian Chadd wrote: A> .. is it possible to trigger a remote DoS through mbuf exhaustion A> somehow by exploiting this? Yes, from a connected network. -- Totus tuus, Glebius. ___ svn-src-all@freebsd.org mailing

Re: svn commit: r249903 - head/sys/netinet

2013-04-25 Thread Adrian Chadd
.. is it possible to trigger a remote DoS through mbuf exhaustion somehow by exploiting this? Adrian On 25 April 2013 10:38, Gleb Smirnoff wrote: > Author: glebius > Date: Thu Apr 25 17:38:04 2013 > New Revision: 249903 > URL: http://svnweb.freebsd.org/changeset/base/249903 > > Log: > Fix co

svn commit: r249903 - head/sys/netinet

2013-04-25 Thread Gleb Smirnoff
Author: glebius Date: Thu Apr 25 17:38:04 2013 New Revision: 249903 URL: http://svnweb.freebsd.org/changeset/base/249903 Log: Fix couple of mbuf leaks in incoming ARP processing. Modified: head/sys/netinet/if_ether.c Modified: head/sys/netinet/if_ether.c =