From owner-freebsd-security Wed Feb 5 09:25:53 1997 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.5/8.8.5) id JAA15336 for security-outgoing; Wed, 5 Feb 1997 09:25:53 -0800 (PST) Received: from smyrno.sol.net (smyrno.sol.net [206.55.64.117]) by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id JAA13156; Wed, 5 Feb 1997 09:24:53 -0800 (PST) Received: from solaria.sol.net (solaria.sol.net [206.55.65.75]) by smyrno.sol.net (8.8.3/8.8.3) with SMTP id LAA27072; Wed, 5 Feb 1997 11:24:43 -0600 (CST) Received: from localhost by solaria.sol.net (8.5/8.5) id LAA12793; Wed, 5 Feb 1997 11:24:40 -0600 From: Joe Greco Message-Id: <199702051724.LAA12793@solaria.sol.net> Subject: Re: 2.1.6+++: crt0.c CRITICAL CHANGE To: vadim@tversu.ac.ru (Vadim Kolontsov) Date: Wed, 5 Feb 97 11:24:38 CST Cc: Guido.vanRooij@nl.cis.philips.com, joerg_wunsch@uriah.heep.sax.de, core@freebsd.org, security@freebsd.org, jkh@freebsd.org In-Reply-To: from "Vadim Kolontsov" at Feb 5, 97 07:55:52 pm X-Mailer: ELM [version 2.4dev PL65] MIME-Version: 1.0 Content-Type: text Sender: owner-security@freebsd.org X-Loop: FreeBSD.org Precedence: bulk > Yes, but why not to use lfix only for static binaries? I can add > checking if binary statically or dynamic linked. Also we can include a > patched and recompiled version of libc into archive. > Of course, problem with _static_ binaries which uses setlocale() > _by itself_ is still exists... this binaries need recompilation.. any > ideas? Are there any such programs in FreeBSD distribution? It should be much more practical to release a small "patch" that included a repaired locale-safe libc, plus the static binaries, plus the "lfix" program with a script to go through and install everything. The thing that terrified me was the possibility that one would have to generate a large "patch" to fix every binary... I will get my butt in gear and go look to see if lfix works on 2.0, 2.0.5, and 2.1.0. ... Joe ------------------------------------------------------------------------------- Joe Greco - Systems Administrator jgreco@ns.sol.net Solaria Public Access UNIX - Milwaukee, WI 414/342-4847