Subject: tftp/tftpd spec non-conformance
To: None <tech-net@netbsd.org>
From: None <itojun@iijlab.net>
List: tech-net
Date: 11/21/2000 23:11:46
	there are spec non-conformance in 4.4BSD tftpd/tftp.
	if we strictly follow RFC1350, we should allow IP address pairs to be
	switched - we should validate connection based on udp src/dst port
	number only.

	4.4BSD tftpd calls connect(2), which forbids us to change IP address
	pairs.  NetBSD tftpd is worse because it calls bind(2) with
	non-wildcard address as well.  4.4BSD tftp trusts server too much
	(always copies port number got from recvfrom).

	question - are there any other implementation that chokes, if we
	correct it?

	(the fix suggestion is from jinmei@kame.net)

itojun