|
This isn't really completely correct; there should be some possibility for
denial of service. The call to setContactAddr is destructive of whatever
information was there previously, but we haven't verified that we're talking to
the real contact at the time it is called.
This problem exists even in the ordinary path where the nodeinfocallback isn't
really requiring proof of anything before throwing out data.
|