Vulnerability Development mailing list archives
Re: TCSH problems?
From: Alex <alex () bsdfreak org>
Date: Wed, 6 Jun 2001 04:49:55 -0400 (EDT)
After some ktracing, and code auditing by myself and a colleague, we believe the problem *may* infact be in libc's setenv() and getenv() functions. We were able to duplicate the bug on various platforms, mostly causing signal 6s and dumping cores. Feedback would be appreciated
setenv HOME `perl -e 'print "/" x 10000'`
^ Length varies from 1024-10000 for effectiveness on diffrent OSes. -Alex
Current thread:
- nonsuid overflows... still at risk? KF (Jun 05)
- TCSH problems? Alex (Jun 06)
- Re: TCSH problems? Alex (Jun 06)
- Re: TCSH problems? Alex (Jun 06)
- Re: TCSH problems? Mike Duncan (Jun 06)
- Re: TCSH problems? Flux9 (Jun 06)
- Re: TCSH problems? KF (Jun 06)
- Re: TCSH problems? KF (Jun 06)
- Re: TCSH problems? Guezou Philippe (Jun 06)
- Re: TCSH problems? Alex (Jun 06)
- TCSH problems? Alex (Jun 06)
- Re: TCSH problems? Kevin J. Menard, Jr. (Jun 06)
- Re: TCSH problems? Flux9 (Jun 06)
- Re: TCSH problems? Sven van ´t Veer (Jun 06)
- Re: TCSH problems? Edsel Adap (Jun 06)
- Re: TCSH problems? Felix Kronlage (Jun 06)