Re: [PATCH net-next-2.6] filter: add a security check at install time

Eric Dumazet
2010-12-02T11:15:59Z

Le jeudi 02 décembre 2010 à 18:10 +0800, Changli Gao a écrit :

> > (By the way, I believe FreeBSD has the security problem Dan reported to us)
>
> Yes. it doesn't do this check.
>

Their scratch memory is not on stack but part of the filter, so no
security problem (You can only read previous values of scratch registers
written by your own filter on handling a previous packet.)

This means it is either run on a single CPU, or there is a hidden SMP
bug in their implementation.