[lwip-devel] [bug #24596] Vulnerability on faulty TCP options length

[Fabian Koch]

Follow-up Comment #2, bug #24596 (project lwip):

I still think it is best practice to drop packets that do not conform to RFC
793.
On the other hand it is a good idea (especially in our scenario) to just
ignore the wrong parts and accept the rest of the packet to increase the
robustness.

    _______________________________________________________

Reply to this item at:

  <http://savannah.nongnu.org/bugs/?24596>

_______________________________________________
  Nachricht geschickt von/durch Savannah
  http://savannah.nongnu.org/