Vulnerability Development mailing list archives

Re: TCSH problems?


From: Alex <alex () bsdfreak org>
Date: Wed, 6 Jun 2001 04:49:55 -0400 (EDT)

        After some ktracing, and code auditing by myself and a colleague,
we believe the problem *may* infact be in libc's setenv() and getenv()
functions.  We were able to duplicate the bug on various platforms, mostly
causing signal 6s and dumping cores.  Feedback would be appreciated


setenv HOME `perl -e 'print "/" x 10000'`

                                        ^ Length varies from 1024-10000
for effectiveness on diffrent OSes.

-Alex


Current thread: