[Snort-devel] Snort 2.0.6 is available!
Andrew Rucker Jones
arjones at ...2237...
Thu Dec 18 12:14:53 EST 2003
-----BEGIN PGP SIGNED MESSAGE-----
| * Out-of-order ACK problem from Andrew Rucker. Also, updated stream4
| to the most recent version from HEAD.
Would have been nice to get my name right. :) Not worried about it, though.
I'm interested in the diff between versions 18.104.22.168 and 22.214.171.124 of
spp_stream4.c, beginning line 4003 in the old version. You say that line
causes an off-by-one error. That's interesting, because when i was
testing for my patch for 2.0.5, the debugging messages made it clear
that not including that line was causing an off-by-one error in the
other direction. Stream4 kept expecting one more byte at the end of a
connection than it was getting, and it was because it counted the FIN as
a data byte. (Admittedly, the error was harmless, but i thought the fix
was, too.) Under what conditions does my change cause an off-by-one, and
where is it compensated for?
GPG key / Schlüssel -- http://simultan.dyndns.org/~arjones/gpgkey.txt
Encrypt everything. / Alles verschlüsseln.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
-----END PGP SIGNATURE-----
More information about the Snort-devel