Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 24 Jun 2014 08:49:43 +0200
From:      Dimitry Andric <dim@FreeBSD.org>
To:        dt71@gmx.com
Cc:        freebsd-hackers@freebsd.org
Subject:   Re: OB1
Message-ID:  <12DA5575-B773-4D28-83BB-5AD1F1C84469@FreeBSD.org>
In-Reply-To: <53A8FBD7.8000900@gmx.com>
References:  <20140622135308.GF1824@pwnie.vrt.sourcefire.com> <53A8FBD7.8000900@gmx.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--Apple-Mail=_DD81146C-A42E-4367-BFF5-12681B0F113F
Content-Transfer-Encoding: 7bit
Content-Type: text/plain;
	charset=us-ascii

On 24 Jun 2014, at 06:17, dt71@gmx.com wrote:
> Speaking of backdoors...
> 
> lib/libugidfw/ugidfw.c:
>> if (len < 0 || len > left)
> 
> ):<

Well, it's just another off-by-one, no need for conspiracy theories. :)

Btw, I'd mailed about this in 2011 already, but it really isn't very
important.  The only consumer is ugidfw, and then only to print out the
parsed rules.

-Dimitry


--Apple-Mail=_DD81146C-A42E-4367-BFF5-12681B0F113F
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.22 (Darwin)

iEYEARECAAYFAlOpH5MACgkQsF6jCi4glqOuxgCg1jfgvhJnyV8ARSJufSkW0sH6
MzMAoIHjrb0LiA6QN6xmBzNDwqbd2Efj
=THR0
-----END PGP SIGNATURE-----

--Apple-Mail=_DD81146C-A42E-4367-BFF5-12681B0F113F--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?12DA5575-B773-4D28-83BB-5AD1F1C84469>