|
Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com |
Subject: glibc env. vars. (again)
From: Chris Evans (chris
ferret.lmh.ox.ac.uk)Date: Wed May 24 2000 - 15:18:52 CDT
- Next message: Matthew Kirkwood: "Re: glibc env. vars. (again)"
- Previous message: Crispin Cowan: "Re: Exploiting overflow of heap-based buffers"
- Next in thread: Matthew Kirkwood: "Re: glibc env. vars. (again)"
- Reply: Matthew Kirkwood: "Re: glibc env. vars. (again)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Hi,
AFAICT, glibc will happily accept the env. var. MALLOC_CHECK_ for suid
programs (it doesn't use secure_getenv). Can anyone think of any problems
with this.
In fact glibc probably needs a re-audit of which env. vars. it trusts.
Cheers
Chris
- Next message: Matthew Kirkwood: "Re: glibc env. vars. (again)"
- Previous message: Crispin Cowan: "Re: Exploiting overflow of heap-based buffers"
- Next in thread: Matthew Kirkwood: "Re: glibc env. vars. (again)"
- Reply: Matthew Kirkwood: "Re: glibc env. vars. (again)"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]