OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: what actually uses xdr_mem.c?

From: Simon Barner (barnerin.tum.de)
Date: Wed Mar 26 2003 - 07:00:56 CST


> Actually, I _would_ check the binaries. Scanning /usr/src doesn't cover
> anything installed via the ports collection (/usr/ports), from other
> sources, or "home-grown" software.

I didn't think of non-base-system software, you are right. From that point of
view, you are certainly right.

As far as I understood your script, it scans the output of "readelf -a", and
prints that file name if and only if this output contains "XDR" or "xdr". Will
this work if the binary is stripped (sorry in case I just overlooked something
stupid :-)

Regards,
 Simon

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQE+gaSICkn+/eutqCoRAp+WAJ4k3xFkk7mv6fl+RuK10BUZ9Ps9mACgqatu
L+wA59UtnSzyY218KBhal2Y=
=V2zG
-----END PGP SIGNATURE-----

_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribefreebsd.org"