[9183] in bugtraq
Re: NetBSD Security Advisory 1999-001: select(2)/accept(2) race
daemon@ATHENA.MIT.EDU (Alan Cox)
Sun Jan 24 16:50:42 1999
Date: Sun, 24 Jan 1999 00:40:33 +0000
Reply-To: Alan Cox <alan@LXORGUK.UKUU.ORG.UK>
From: Alan Cox <alan@LXORGUK.UKUU.ORG.UK>
X-To: lukem@GOANNA.CS.RMIT.EDU.AU
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To: <199901200953.UAA26938@wombat.cs.rmit.edu.au> from "Luke Mewburn"
at Jan 20, 99 08:53:52 pm
> 2) Modify the kernel to not remove sockets from the accept(2) queue
> when they are closed. A change that implements this has been added
> to NetBSD-current, and is available at:
> ftp://ftp.NetBSD.ORG/pub/NetBSD/misc/security/patches/19990120-accept
>
This method works well btw. Linux has always done this, (by happy chance). Im
_amazed_ this bug exists. It was documented/abused/used/fixed in so many
different places at different times even back in 1990/1991 or so
Alan
