uisp-dev
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Uisp-dev] Re: [Bug #1551] Buffer overflow causes crash in uisp on some


From: Theodore A. Roth
Subject: [Uisp-dev] Re: [Bug #1551] Buffer overflow causes crash in uisp on some s19 files
Date: Wed, 30 Oct 2002 14:32:07 -0800 (PST)

Hi Seth,

Unless you can find something wrong with this, I'll commit it.

It has every from you patch and a few other sanity check and some
additions for completeness.

I looked at the suid handling. If the suid permission is set, the code
does drop setuid privies as soon as possible with:

  setgid(getgid());
  setuid(getuid());

The code comments already say that it is not recommended to use uisp with
setuid privies.

Thanks.

Ted Roth

Attachment: uisp-srec.diff
Description: Text document


reply via email to

[Prev in Thread] Current Thread [Next in Thread]