Re: Patch for DoS attack in ipc/msg.c

Andi Kleen (ak@muc.de)
02 Nov 1999 08:58:36 +0100


s-max@pacbell.net (Scott Maxwell) writes:
>
> The patch simply makes the message size 1 if the user claims it's 0
> (note that struct msgbuf includes one byte for the message text, so
> this should be safe). This shouldn't break any well-behaved apps that
> send empty messages -- if there are any such apps -- but it prevents
> the DoS attack.

I think the correct fix would be to charge headers fully too. That is
how networking does it.

-Andi

-- 
This is like TV. I don't like TV.

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/