Attention is currently required from: lynxis lazus, osmith, pespin.

Patch set 4:Code-Review -2

View Change

1 comment:

• Patchset:

  • Patch Set #4:

    Actually, we cannot merge this patch as-is. Releasing PDP contexts early, before the authentication completed, opens a door for a DoS vector: an attacker sending an ATTACH REQUEST on behalf of the victim will efficiently terminate all active PDP contexts of the victim.

To view, visit change 42594. To unsubscribe, or for help writing mail filters, visit settings.