OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: THe Glibc malloc debug
From: Alan Cox (alanlxorguk.ukuu.org.uk)
Date: Wed May 24 2000 - 17:55:56 CDT


Actually this looks a _LOT_ more serious than on first inspection. Glibc
is doing library prelinking _BEFORE_ the application runs. Thus it will itself
open fd 2 at times to load libraries, read ld.preload and other files...

Fortunately the ones I can find seem to be read only in glibc. However I have
no idea what file handles are opened with write by other legitimate support
libraries and might end up as fd 2 when under attack

Alan