On Wed, August 23, 2006 0:34, Alexey Kuznetsov said: >> > It is the only protection of commiting infinite amount of memory to a >> > socket. >> >> Doesn't the "if (atomic_read(&sk->sk_wmem_alloc) < sk->sk_sndbuf)" check in >> sock_alloc_send_pskb() >> limit things already? > > Unfortunately, it does not. You can open a socket, send > something to a selected victim, close it, and repeat this > until receiver accumulates enough of skbs to kill the system.
Well, it seems the devil is in the details, as usual. Isn't a socket freed until all skb are handled? In which case the limit on the number of open files limits the total memory usage? (Same as with streaming sockets?) Greetings, Indan - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
