Re:Serious localhost vulnerability found in FreeBSD
by jey on Tuesday December 01, 2009 @01:36PM
(#970321)
Have a non-broken mirror? The linked freebsd-announce page appears to stop loading randomly with a truncated page.
EDIT: There was a request here for clarification on why the patch worked, since unsetenv was being called on the same vars in the unpatched code. Thanks for the explanation, cperciva.
Re:Serious localhost vulnerability found in FreeBSD
by cperciva on Tuesday December 01, 2009 @01:50PM
(#970358)
The problem is that the unsetenv function was POSIXified to make it return int when it used to return void; and then it started returning -1 when the environment was corrupt.
EDIT: There was a request here for clarification on why the patch worked, since unsetenv was being called on the same vars in the unpatched code. Thanks for the explanation, cperciva.