Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Path: utzoo!mnetor!uunet!seismo!husc6!cmcl2!rutgers!ucla-cs!zen!ucbvax!A.ISI.EDU!LYNCH From: LYNCH@A.ISI.EDU (Dan Lynch) Newsgroups: comp.protocols.tcp-ip Subject: Re: Streams TCP/IP Message-ID: <8707300326.AA06674@ucbvax.Berkeley.EDU> Date: Wed, 29-Jul-87 23:05:16 EDT Article-I.D.: ucbvax.8707300326.AA06674 Posted: Wed Jul 29 23:05:16 1987 Date-Received: Sat, 1-Aug-87 02:33:13 EDT References: <24335@sun.uucp> Sender: daemon@ucbvax.BERKELEY.EDU Distribution: world Organization: The ARPA Internet Lines: 11 Guy Harris said something that made me see red: the TLI uses state information that is kept in userland. Does that mean that it takes parameters from userland and then operates on them in kernelland or doe sit mean that it uses userland dataspace to keep some state variables that the user can change between system calls to get data to or form the stream? If so, it is a potential source of random havoc or invidious hackery to accomplish amazing ends. In short, I am asking: is this a security or integrity breach ot not? Dan -------