plotters / otpd

Automatically exported from code.google.com/p/otpd
GNU General Public License v2.0
0 stars 0 forks source link

gsmd replay detection is misordered #20

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
gsmd tests expected length of plaintext before testing seqno, leading to

- incorrect error reporting in most cases (dup or late reply)
- for late replies, the real reply is then discarded

This is normally only seen on Linux, which reuses ephemeral ports ASAP so the 
chance to get a duplicate client port (which will then receive late replies) is 
high under load.  On Solaris ephemeral ports are allocated in increasing order, 
so reuse within the problem window is rare.

Original issue reported on code.google.com by fr...@gmail.com on 2 Nov 2010 at 12:17