From owner-freebsd-security Wed Feb 5 09:42:49 1997 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.5/8.8.5) id JAA12312 for security-outgoing; Wed, 5 Feb 1997 09:42:49 -0800 (PST) Received: from char-star.rdist.org (char-star.rdist.org [206.54.252.22]) by freefall.freebsd.org (8.8.5/8.8.5) with SMTP id JAA12268 for ; Wed, 5 Feb 1997 09:42:45 -0800 (PST) From: tqbf@enteract.com Received: (qmail 9986 invoked by uid 1001); 5 Feb 1997 17:43:07 -0000 Date: 5 Feb 1997 17:43:07 -0000 Message-ID: <19970205174307.9985.qmail@char-star.rdist.org> To: eivind@dimaga.com, freebsd-security@freebsd.org Subject: Re: 2.1.6+++: crt0.c CRITICAL CHANGE In-Reply-To: <3.0.32.19970205173026.0093c150@dimaga.com> Reply-To: tqbf@enteract.com Sender: owner-security@freebsd.org X-Loop: FreeBSD.org Precedence: bulk In article <3.0.32.19970205173026.0093c150@dimaga.com>, you wrote: >I was unable to find a call to any locale-function in 2.1.6 "at". That's because 2.1.x programs don't explicitly call setlocale() - they rely on crt0 start() to do that for them. FreeBSD 2.2's at(1) explicitly calls setlocale() from main(), before getopt. In 2.1.6, you're screwed until you fix crt0.c. In FreeBSD 2.2, prior to December, you're screwed until you remove the setlocale() call from at(1) or fix your locale routines. -- ---------------- Thomas Ptacek at EnterAct, L.L.C., Chicago, IL [tqbf@enteract.com] ---------------- exit(main(kfp->kargc, argv, environ));