[lwip-devel] [bug #22249] TCP MSS set to 0 into TCP option

[Marc Chaland]

Follow-up Comment #2, bug #22249 (project lwip):

A malicious client may crash easily IP stack by sending a null TCP MSS
option. One similar bug has already been fixed :
https://savannah.nongnu.org/bugs/?21494

I don't know if there is a minimum MSS fixed by RFC, but many stacks limit it
down to 536.


    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?22249>

_______________________________________________
  Message posté via/par Savannah
  http://savannah.nongnu.org/