The one-shot loopback listener accepted the first connection with no
validation, and the handshake discarded the busid the peer sent. Any
local process racing the driver's WSK connect could receive the
OP_REP_IMPORT device info and speak raw USB/IP to the remote device
while denying the real attach. Accepted peers must now be kernel-owned
sockets (GetExtendedTcpTable owner is the System process), complete the
handshake within a deadline, and request exactly this session's busid;
rejected peers are dropped without ending the session.
世界
33d6f60d88