From owner-freebsd-hackers@FreeBSD.ORG Wed May 27 17:51:09 2009 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 447C71065763 for ; Wed, 27 May 2009 17:51:09 +0000 (UTC) (envelope-from oliver.pntr@gmail.com) Received: from mail-bw0-f213.google.com (mail-bw0-f213.google.com [209.85.218.213]) by mx1.freebsd.org (Postfix) with ESMTP id BD79F8FC0A for ; Wed, 27 May 2009 17:51:08 +0000 (UTC) (envelope-from oliver.pntr@gmail.com) Received: by bwz9 with SMTP id 9so4924846bwz.43 for ; Wed, 27 May 2009 10:51:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=ZEvrhSFii10dl/6bf11Ht3JjRBCT4NHisU+wjXHCS98=; b=JMFyba+A3lA+uNr1Ib5q/nOUrzK3GPQfMUDUNG73iygd5mcv5iZi3nu/B1srk7JTyF DHysEEmGQBL4TYAlBQC0qcUF24UX8tEQV6cG6PQY1LxZ3njqbXl72QGB9F6ySrEYO2HY Sc05SNQIRyfPnxk7U8s26zDfqtlV5mcIxT24E= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=q8Cy1h9PpkS9hxdz3SkxjRMYrsHxs5PZr1FuBAP2mTJKmYjgM3gLhoNZKQZCWcjmCv FHItBbjJ7gasfVtaELFdAw/2/dlPjCzLK0MxU+dR9bvnAVJiKAHXmWrZOMLH5X0dci+k CfBVMBhOiW+8pSnHiR9zBp0HSjFUQix7Y42lA= MIME-Version: 1.0 Received: by 10.103.244.19 with SMTP id w19mr152440mur.133.1243446667314; Wed, 27 May 2009 10:51:07 -0700 (PDT) In-Reply-To: <86vdnmijgs.fsf@ds4.des.no> References: <23727599.post@talk.nabble.com> <86prdvipwe.fsf@ds4.des.no> <0vGjPHEq7MqxjtFmBufY+mBxlR4@7oUjtCwN654QcDr16CH+kAk8bJg> <86vdnmiz30.fsf@ds4.des.no> <15QQC+1YeDzOjf35dqyJmioc1ik@XX1fo6zQUfC4h0jjRC6IBz3oNH4> <86prdug1p0.fsf@ds4.des.no> <86vdnmijgs.fsf@ds4.des.no> Date: Wed, 27 May 2009 19:51:07 +0200 Message-ID: <6101e8c40905271051r3bb9d633kec6d198d45fc9cf6@mail.gmail.com> From: Oliver Pinter To: =?ISO-8859-1?Q?Dag=2DErling_Sm=F8rgrav?= Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: freebsd-hackers@freebsd.org, Jakub Lach Subject: Re: FYI Lighttpd 1.4.23 /kernel (trailing '/' on regular file symlink) vulnerability X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 May 2009 17:51:09 -0000 Hi! This is a redefinitions of PARAMASK in the patch, that you attached -------8<--------- ... #define PARAMASK 0x0ffffe00 /* mask of parameter descriptors */ +#define TRAILINGSLASH 0x10000000 /* path ended in a slash */ +#define PARAMASK 0x1ffffe00 /* mask of parameter descriptors */ ... -------8<--------- On 5/27/09, Dag-Erling Sm=F8rgrav wrote: > Eygene Ryabinkin writes: >> [new three-part patch] > > I committed the namei.h cleanup patch and the vfs_lookup.c comment > patch. > > I made a number of changes to the trailing-slash patch. Can you > double-check it before I commit it? > > DES > -- > Dag-Erling Sm=F8rgrav - des@des.no > >