Vulnerability Development mailing list archives

Re: FreeBSD listen()


From: davids () WEBMASTER COM (David Schwartz)
Date: Sat, 30 Oct 1999 15:14:26 -0700


Hello David Schwartz,

29.10.1999 0:13, you wrote: FreeBSD listen();


D>         It makes no sense at all to use the listen backlog as
any sort of security
D> mechanism. If you only wish to accept one connection, only
call 'accept'
D> once.

accept()   just  allocates  socket  for  connection  that  is  already
established and removes this connection from queue. It works just like
getchar()  works  with  keyboard  input.  Calling  accept once doesn't
assumes  you  that  only  one connection is established - like calling
getchar()  once doesn't assumes you that only one symbol is entered by
user.

        So? What good does it do to complete a TCP connection if no data will be
passed through it?

D>         This is about active versus passive FTP. It has
nothing to do with listen
D> backlogs or connection counts.

It works in FreeBSD just because of this problem.

        That's nonsense. The listen backlog cannot be used as a security mechanism
on any platform that I know of.

        DS


Current thread: