看板FB_security
標 題Re: bin/64150: [PATCH] ls(1) coredumps when started via execve(2)
發信站NCTU CSIE FreeBSD Server (Mon Mar 15 20:01:14 2004)
轉信站ptt!FreeBSD.csie.NCTU!not-for-mail
--aM3YZ0Iwxop3KEKx
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Mon, Mar 15, 2004 at 01:25:05PM +0100, Marc Olzheim wrote:
> On Fri, Mar 12, 2004 at 08:29:52PM +0100, Marc Bevand wrote:
> > On 12 Mar 2004, Ruslan Ermilov wrote:
> > | On Fri, Mar 12, 2004 at 11:07:25AM -0500, Tom Rhodes wrote:
> > | >=20
> > | > Will it 'break' anything?
> > |
> > | Sure it will, the question is should we care about something that's
> > | already broken. ;)
> >=20
> > It will break almost all shellcodes trying to be the shorter ones
> > (as they pass NULL for argv and envp). So we can view it as a small
> > security improvement (just kidding).
>=20
> When I tested my patches (over 2 years ago), I didn't trigger any
> compilation, nor any runtime problems...
>=20
You didn't try any shellcodes lurking out there, did you? ;)
Cheers,
--=20
Ruslan Ermilov
FreeBSD committer
[email protected]
--aM3YZ0Iwxop3KEKx
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)
iD8DBQFAVhCvUkv4P6juNwoRAvq5AJ9a/q+dW277IHFKU/Z6CXD9RShnqgCcC+Y2
ZWwrHaPMbRL2vM96+KVYl6M=
=soGK
-----END PGP SIGNATURE-----
--aM3YZ0Iwxop3KEKx--