>Number:         2692
>Category:       kern
>Synopsis:       Giving bogus option to traceroute panics: m_copym
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    kern-bug-people (Kernel Bug People)
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Aug 12 23:20:11 1996
>Last-Modified:
>Originator:     Brett Slager
>Organization:
>Release:        1.1
>Environment:
System: NetBSD snarf.mdn.com 1.1 NetBSD 1.1 (SNARF) #1: Tue Jul 23 01:30:43 EST 1996 bds@snarf.mdn.com:/usr/src/sys/arch/i386/compile/SNARF i386


>Description:
	Any user can cause a kernel panic by giving a bogus packet size
	argument to traceroute.
>How-To-Repeat:
	run traceroute with a bogus packet size argument:
		traceroute snarf.mdn.com 2700
>Fix:
	Not sure on a fix, I haven't had time to check this out.
>Audit-Trail:
>Unformatted: