Bugtraq mailing list archives

Re: libresolv+ bug


From: czetts () rpi edu (Steve Czetty)
Date: Mon, 19 Aug 1996 05:02:03 -0500


In response to the libresolv+ hole ...  I'm sure there's a better/more
encompassing/cleaner method of fixing it, but here's my patch for ping (I

Yes..  I (once again) patched my libc to ignore the environment variable
altogether..  Why do we need to have the ability to specify an
/etc/host.conf other than /etc/host.conf???

-Steve

-----

--- libc/inet/gethstnmad.c.old  Fri Aug 16 14:17:23 1996
+++ libc/inet/gethstnmad.c      Fri Aug 16 14:18:12 1996
@@ -306,9 +306,13 @@
 #if NLS
        libc_nls_init();
 #endif
+#ifdef INSECURE_ENV_HOSTCONF
        if(NULL==(hostconf=getenv(ENV_HOSTCONF))){
                hostconf=_PATH_HOSTCONF;
        }
+#else
+       hostconf=_PATH_HOSTCONF;
+#endif
        if ((fd = (FILE *)fopen(hostconf, "r")) == NULL) {
                                /* make some assumptions */
                service_order[0] = SERVICE_BIND;



Current thread: