From owner-freebsd-security@FreeBSD.ORG Mon Mar 15 12:29:59 2004 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 73B9B16A4CE; Mon, 15 Mar 2004 12:29:59 -0800 (PST) Received: from mailhost.stack.nl (vaak.stack.nl [131.155.140.140]) by mx1.FreeBSD.org (Postfix) with ESMTP id DEF8043D41; Mon, 15 Mar 2004 12:29:58 -0800 (PST) (envelope-from marcolz@stack.nl) Received: from hammer.stack.nl (hammer.stack.nl [2001:610:1108:5010::153]) by mailhost.stack.nl (Postfix) with ESMTP id 40561245#735A51F00A; Mon, 15 Mar 2004 21:29:57 +0100 (CET) Received: by hammer.stack.nl (Postfix, from userid 333) id 504ED61B0; Mon, 15 Mar 2004 21:30:00 +0100 (CET) Date: Mon, 15 Mar 2004 21:30:00 +0100 From: Marc Olzheim To: Ruslan Ermilov Message-ID: <20040315203000.GA42542@stack.nl> References: <20040312105730.GA99925@stud326.idi.ntnu.no> <20040312110657.GB52099@ip.net.ua> <20040312111526.GA14260@stack.nl> <20040312125820.GA8574@lum.celabo.org> <20040312154600.GC2235@ip.net.ua> <20040312110725.698ebe20@localhost> <20040312161049.GA2872@ip.net.ua> <20040312192952.GA23211@nash.epita.fr> <20040315122505.GA686@stack.nl> <20040315202311.GB72326@ip.net.ua> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20040315202311.GB72326@ip.net.ua> X-Operating-System: FreeBSD hammer.stack.nl 5.2-CURRENT FreeBSD 5.2-CURRENT X-URL: http://www.stack.nl/~marcolz/ User-Agent: Mutt/1.5.6i cc: Marc Olzheim cc: Marc Bevand cc: security@freebsd.org Subject: Re: bin/64150: [PATCH] ls(1) coredumps when started via execve(2) with no argv. X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Mar 2004 20:29:59 -0000 On Mon, Mar 15, 2004 at 10:23:12PM +0200, Ruslan Ermilov wrote: > > When I tested my patches (over 2 years ago), I didn't trigger any > > compilation, nor any runtime problems... > > > You didn't try any shellcodes lurking out there, did you? ;) Not with the hope of succeeding, no... :-P Marc