[Winpcap-bugs] bpf_validate() needs to do more checks

[Loris Degioanni]

Guy Harris wrote:
> 
> On Dec 2, 2005, at 3:51 PM, Loris Degioanni wrote:
> 
>> Guy Harris wrote:
>>
>>> BTW, what do those new instructions do?  At some point I might  want  
>>> to see whether it's OK to pick up some additional  instructions from  
>>> the BSD/OS BPF interpreter - it has some  instructions to scan IPv6  
>>> headers to find the last header in the  header chain, which would 
>>> let  us do a better job of handling the  IPv6 "protochain" operator
>>
>>
>> Do they have support for this operator in the compiler too?
> 
> 
> They might, but all I've seen is their bpf_filter() implementation.   It 
> shouldn't be that hard to add support for it in the compiler.

Yeah, and it would be quite a useful feature...

> I think they also cleaned up some other things, e.g. adding an  indexed 
> version of some instructions.
> 

Is there a reason why these guys don't submit their changes to 
tcpdump.org too? And they don't tell us when they incorporate and 
improve code written by us, like the JIT compiler? A better 
communication could probably help both the communities...

Loris