From owner-freebsd-security  Mon Jul 16 23:36:12 2001
Delivered-To: freebsd-security@freebsd.org
Received: from femail13.sdc1.sfba.home.com (femail13.sdc1.sfba.home.com [24.0.95.140])
	by hub.freebsd.org (Postfix) with ESMTP id 6E68837B405
	for <security@FreeBSD.ORG>; Mon, 16 Jul 2001 23:36:07 -0700 (PDT)
	(envelope-from btdang@home.com)
Received: from home.com ([24.248.85.196]) by femail13.sdc1.sfba.home.com
          (InterMail vM.4.01.03.20 201-229-121-120-20010223) with ESMTP
          id <20010717063606.OJDF20529.femail13.sdc1.sfba.home.com@home.com>
          for <security@FreeBSD.ORG>; Mon, 16 Jul 2001 23:36:06 -0700
Message-ID: <3B53DE0F.28970950@home.com>
Date: Mon, 16 Jul 2001 23:41:19 -0700
From: Bruce Dang <btdang@home.com>
Organization: Boys & Girls Clubs
X-Mailer: Mozilla 4.77 [en] (X11; U; Linux 2.2.12 i386)
X-Accept-Language: en
MIME-Version: 1.0
To: security@FreeBSD.ORG
Subject: Re: buffer overflows
References: <XFMail.20010716213950.mheffner@novacoxmail.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Yea, there are quite a few of those available. You might want to look at
www.lsap.org/faq.txt or read "Writing Priviledge Programs" by Benjamin
Karas (search packetstorm, I forgot the URL).

Bruce Dang
www.tbug.org


Mike Heffner wrote:
> 
> On 10-Jul-2001 Christian Kuhtz wrote:
> |
> | Does anyone have a pointer to a FAQ or other document which I can rub into a
> | developers nose to help him/her find the code prone to buffer overflows and
> | how to fix them?
> |
> | The question keeps coming up more frequently than I have time to answer it
> | ;-)
> 
> You could check out the Secure Programming for Linux and Unix HOWTO at:
> http://www.dwheeler.com/secure-programs/.
> 
> Mike
> 
> --
>   Mike Heffner         <mheffner@[acm.]vt.edu>
>   Fredericksburg, VA       <mikeh@FreeBSD.org>
> 
>   ------------------------------------------------------------------------
>    Part 1.2Type: application/pgp-signature

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message