Subject: Re: security/11459: possible fix for remote DoS attack in BIND-8.2.2-P5
To: Greg A. Woods <woods@weird.com>
From: None <itojun@iijlab.net>
List: netbsd-bugs
Date: 11/10/2000 15:49:52
>Yes, the change given in RedHat's bugzilla to the value given to
>STREAM_AXFRIXFR (in ns_defs.h) may be correct, at least assuming that
>STREAM_AXFRIXFR isn't intended as a multi-purpose value specifying two
>flags simultaneously (which would, IMHO, be bad programming anyway).
>
>
>However either the patch I originally attached, or perhaps this more
>generic and possibly more correct patch, is still absolutely necessary:

	i'm looking at 822P7.  822P7 changes STREAM_AXFRIXFR only.  there's no
	code change in ns_xfr.c.

itojun