Subject: Re: Fix for KAME PF_KEY DUMP-truncation marshalling bug
To: Jonathan Stone <jonathan@dsg.stanford.edu>
From: Jason Thorpe <thorpej@wasabisystems.com>
List: tech-net
Date: 05/28/2004 17:14:14
--Apple-Mail-63-108272192
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII; format=flowed


On May 28, 2004, at 4:45 PM, Jonathan Stone wrote:

> .. And here's a version which allows arbitrarily deep (up to mbuf
> supply) ACQUIREs. Well, really all KEY_SENDUP_REGISTERED messages.

In principle, I agree with this.  Patch looks OK, except for...

> This is proof-of-concept/debugging; I'd probably add the extra
> explicit argument to key_sendup(), as noted, before committing.
> The code should also grab the actual limit on little mbufs, instead
> of abusing NMBCLUSTERS.

There is no limit on little mbufs, per se.  I.e. the pool has no high 
water mark.

How about we just pick some value?  Say, 512K?  More?  Less?

         -- Jason R. Thorpe <thorpej@wasabisystems.com>


--Apple-Mail-63-108272192
content-type: application/pgp-signature; x-mac-type=70674453;
	name=PGP.sig
content-description: This is a digitally signed message part
content-disposition: inline; filename=PGP.sig
content-transfer-encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (Darwin)

iD8DBQFAt9XWOpVKkaBm8XkRAkLmAJ9h9LcmPbmMS45LbXjA8I76JtQPjACdECII
qFpfaf1bW0AF4Tut8ukdung=
=js4Z
-----END PGP SIGNATURE-----

--Apple-Mail-63-108272192--