[Snort-devel] Snort 2.0.6 is available!

Andrew Rucker Jones arjones at ...2237...
Thu Dec 18 12:14:53 EST 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

| * Out-of-order ACK problem from Andrew Rucker.  Also, updated stream4
|   to the most recent version from HEAD.

Would have been nice to get my name right. :) Not worried about it, though.

	I'm interested in the diff between versions 1.152.2.1 and 1.152.2.2 of
spp_stream4.c, beginning line 4003 in the old version. You say that line
causes an off-by-one error. That's interesting, because when i was
testing for my patch for 2.0.5, the debugging messages made it clear
that not including that line was causing an off-by-one error in the
other direction. Stream4 kept expecting one more byte at the end of a
connection than it was getting, and it was because it counted the FIN as
a data byte. (Admittedly, the error was harmless, but i thought the fix
was, too.) Under what conditions does my change cause an off-by-one, and
where is it compensated for?

		-&


- --
GPG key / Schlüssel -- http://simultan.dyndns.org/~arjones/gpgkey.txt
Encrypt everything. / Alles verschlüsseln.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/4gomoI7tqy5bNGMRAgm8AKCaD3+MVLUq2TePWnQoOvd3EyG60wCg9vrY
J6Qd2PdjnSE8wDRlA9hcI7g=
=72jt
-----END PGP SIGNATURE-----





More information about the Snort-devel mailing list