Date: Tue, 4 Sep 2001 23:33:21 +0400 From: "Andrey A. Chernov" <ache@nagual.pp.ru> To: Kris Kennaway <kris@obsecurity.org> Cc: Matt Dillon <dillon@earth.backplane.com>, Mark Peek <mark@whistle.com>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/lib/libc/stdlib strtol.3 strtol.c strtoll.c strtoq.c strtoul.3 strtoul.c strtoull.c strtouq.c Message-ID: <20010904233320.A34429@nagual.pp.ru> In-Reply-To: <20010904122843.A56085@xor.obsecurity.org> References: <200109041639.f84GdBm87501@freefall.freebsd.org> <20010904204454.A32114@nagual.pp.ru> <p05100307b7bab7186d08@[10.1.10.118]> <200109041705.f84H5W692572@earth.backplane.com> <20010904122843.A56085@xor.obsecurity.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--LQksG6bCIzRHxTLp Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Sep 04, 2001 at 12:28:43 -0700, Kris Kennaway wrote: > Having rcsid[] visible in source files is very useful from my point of > view in determining whether a binary is vulnerable to a security There is no such strings in binary due to shared linkage in most cases. > vulnerability. If we have rcsids in everything (especially > libraries), then it would be trivial to write scanning software which For released versions library major is enough to determine functions present there. --=20 Andrey A. Chernov http://ache.pp.ru/ --LQksG6bCIzRHxTLp Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: 2.6.3ia iQCVAwUBO5UsgOJgpPLZnQjrAQE/+gQAoVvJ9T1PCx7xLpWobnF0hCTNfd/Nj/uG 8Rva0T7fs02mhbpyp4M758+vGUn8cxi/eg734WkeDSbIix3bwNDmdw039wzlaLRN Wek43w/OU3s3fqfZtBJrbRsc3uP0UYDmWlqFy4iD4dmdxFRubc9tFDadNjZ1b6lz arIS9G65vz0= =K81O -----END PGP SIGNATURE----- --LQksG6bCIzRHxTLp-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010904233320.A34429>