search for: yhu2

thanks your reply, could you please send off official fix? On 11/28/2014 04:05 AM, Wayne Davison wrote: > On Sun, Nov 16, 2014 at 10:44 PM, yhu2 <yadi.hu at windriver.com > <mailto:yadi.hu at windriver.com>> wrote: > > + usleep(t*1000); > Is it a correct fix? any comments would be appreciated!!! > > > The hang was not because time went backwards, but because it moved > forward by over 2 years (w...

Hi,everyone here: whether or not CVE-2014-8242 affects rsync? any commnet would be appreciated!! Yadi

wayne. Thanks your explanation, how about MD4 (rsync protocal <30)? any comment would be appreciated!! Thanks again. Yadi On 05/12/2015 05:19 AM, Wayne Davison wrote: > On Mon, May 11, 2015 at 12:50 AM, yhu2 <yadi.hu at windriver.com > <mailto:yadi.hu at windriver.com>> wrote: > > whether or not CVE-2014-8242 affects rsync? any commnet would be > appreciated!! > > > Yes. It would be extremely hard for someone to trigger that via > indirect means (such as...

Hello eveyone! According to below reproduce steps,you could observe a rsync hang: 1:configure and startup rsync service and mkdir /root/a mkdir /root/b dd if=/dev/zero of=/root/b/1 bs=1M count=1 dd if=/dev/zero of=/root/b/2 bs=1M count=1 dd if=/dev/zero of=/root/b/3 bs=1M count=1 dd if=/dev/zero of=/root/b/4 bs=1M count=1 dd if=/dev/zero of=/root/b/5 bs=1M count=1 2: start testcase

On Mon, May 11, 2015 at 12:50 AM, yhu2 <yadi.hu at windriver.com> wrote: > whether or not CVE-2014-8242 affects rsync? any commnet would be > appreciated!! > Yes. It would be extremely hard for someone to trigger that via indirect means (such as inserting DB data and managing to match a checksum record boundary in con...