From owner-freebsd-security Thu Jul 6 12:42:57 2000 Delivered-To: freebsd-security@freebsd.org Received: from pawn.primelocation.net (pawn.primelocation.net [205.161.238.235]) by hub.freebsd.org (Postfix) with ESMTP id 9A50A37B8EA for ; Thu, 6 Jul 2000 12:42:46 -0700 (PDT) (envelope-from cdf.lists@fxp.org) Received: by pawn.primelocation.net (Postfix, from userid 1016) id 1D23C9B1C; Thu, 6 Jul 2000 15:42:41 -0400 (EDT) Received: from localhost (localhost [127.0.0.1]) by pawn.primelocation.net (Postfix) with ESMTP id 10684BA11; Thu, 6 Jul 2000 15:42:41 -0400 (EDT) Date: Thu, 6 Jul 2000 15:42:40 -0400 (EDT) From: "Chris D. Faulhaber" X-Sender: cdf.lists@pawn.primelocation.net To: Brett Glass Cc: Matt Heckaman , security@FreeBSD.ORG Subject: Re: ftpd and setproctitle() In-Reply-To: <4.3.2.7.2.20000706132133.04a94ad0@localhost> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Thu, 6 Jul 2000, Brett Glass wrote: > Thank you! I've checked 3.1, and it's OK too. Theo just wrote > to say that he thinks the bug originated in BSD 4.4-Lite. (And, > I guess, has been around since that time due to the wonderful > error-encouraging nature of the C language -- Sigh.) > > I'm hoping that the bug was nailed prior to 2.2.8, which a number > of sites with an "if it ain't broke, don't fix it" policy are still > running. > > Anyone have a 2.2.8 CD handy? Mine's long gone. > If you have a webbrowser, please see: http://www.freebsd.org/cgi/cvsweb.cgi/src/libexec/ftpd/ftpd.c.diff?r1=1.13&r2=1.14 revision 1.14 date: 1996/01/01 08:35:11; author: peter; state: Exp; lines: +11 -8 Make ftpd use setproctitle() from libutil I've left the old code in there under #ifdef OLD_SETPROCTITLE in case somebody wants to try to compile out ftpd on some other machine. In addition to using setprotitle from libutil, peter fixed all the setproctitle() calls. This was done before RELENG_2_2 branch point (well before 2.2.8). ----- Chris D. Faulhaber - jedgar@fxp.org - jedgar@FreeBSD.org -------------------------------------------------------- FreeBSD: The Power To Serve - http://www.FreeBSD.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message