From owner-freebsd-hackers  Sat Oct 19 00:08:02 1996
Return-Path: owner-hackers
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.5/8.7.3) id AAA24655
          for hackers-outgoing; Sat, 19 Oct 1996 00:08:02 -0700 (PDT)
Received: from zeus.theos.com (zeus.theos.com [199.185.137.1])
          by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id AAA24627;
          Sat, 19 Oct 1996 00:07:58 -0700 (PDT)
Received: from LOCALHOST.theos.com (LOCALHOST.theos.com [127.0.0.1]) by zeus.theos.com (8.8.Beta.2/8.8.Beta.1) with SMTP id BAA29373; Sat, 19 Oct 1996 01:07:51 -0600 (MDT)
Message-Id: <199610190707.BAA29373@zeus.theos.com>
X-Authentication-Warning: zeus.theos.com: LOCALHOST.theos.com [127.0.0.1] didn't use HELO protocol
To: Poul-Henning Kamp <phk@critter.tfs.com>
cc: dyson@freebsd.org, deraadt@theos.com (Theo de Raadt), downsj@teeny.org,
        ache@nagual.ru, dg@root.com, gritton@byu.edu,
        freebsd-hackers@freebsd.org, tech-userlevel@netbsd.org,
        misc@openbsd.org
Subject: Re: cvs commit: src/lib/libc/db/hash hash_buf.c 
In-reply-to: Your message of "Sat, 19 Oct 1996 09:04:01 +0200."
             <9517.845708641@critter.tfs.com> 
Date: Sat, 19 Oct 1996 01:06:18 -0600
From: Theo de Raadt <deraadt@theos.com>
Sender: owner-hackers@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

> In message <199610190650.BAA02780@dyson.iquest.net>, "John S. Dyson" writes:
> >> > Additionally, that "fix" was simply the wrong thing to do, and there are
> >> > better ways to deal with the problem.  If the zeroing the buffer in db
> >> > was typical of the ways that others are "fixing" security, well...  Sad...
> > :-(.
> >> 
> >> Ah John, ever eager to continue a flame war aren't you.
> >> 
> >Please refer to the message that I commented on...  I am NOT flaming,
> >simply stating an outsiders view of the unsubstantiated OpenBSD position.
> >BTW, what flame war?  Why are you bringing flamage up?
> >
> 
> Because obviously Theo is Very Proud of his fix :-)

It was not my fix.  However, it is correct.  Perhaps you will spot the
other similar problems before you ship your next release.


You and John are doing great things for inter-camp relations.