* buffer overflow in ip_options_echo
@ 2004-02-22 15:23 Alex Lyahkov
0 siblings, 0 replies; only message in thread
From: Alex Lyahkov @ 2004-02-22 15:23 UTC (permalink / raw)
To: 'lkml'
Hello All
When i trued to do stress testing my project i found strange bug in high
network activity.
In test started four ab each with 1000 connections in same time.
after 25-60 minutes testing i found panic in network subsystem.
I patch my kernel with kgdb 1.6 and found that
Program received signal SIGSEGV, Segmentation fault.
0xc0255ad3 in ip_send_reply (sk=0x6e755320, skb=0x3232202c,
arg=0x62654620, len=808464928)
at ip_output.c:982
982 ip_output.c: No such file or directory.
in ip_output.c
(gdb) p replyopts.opt.optlen
$8 = 60 '<'
but functions reserved 40 byte for options and it do overflow.
--
Alex Lyahkov <shadow@psoft.net>
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2004-02-22 15:23 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2004-02-22 15:23 buffer overflow in ip_options_echo Alex Lyahkov
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®