mirror of
https://gitlab.com/chrony/chrony.git
synced 2025-12-04 10:35:08 -05:00
Don't rely on random source port of a connected socket alone as a protection against spoofed packets in chronyc. Generate a fully random 32-bit sequence number for each request and modify the code to not send a new request until the timeout expires or a valid response is received. For a monitoring protocol this should be more than good enough.
81 KiB
81 KiB