[Bro-Dev] Alignment check in RPC code

Vern Paxson vern at icir.org
Sat Dec 11 10:55:19 PST 2010


> I'm also wondering alignment checks should be done higher up in the
> analyzer tree? E.g., to guarantee to protocol analyzers that the buffer
> in DeliverStream() and DeliverPacket() calls are 4- or 8-byte aligned

I don't see how this can work in general, because higher up the layout of
data in the buffer isn't known.  Plus this is a potentially expensive cost
(copying the payload in bulk) that might not be needed at all, depending
on what the analyzer does with the payload.

		Vern


More information about the bro-dev mailing list