Date: Thu, 07 Sep 2000 15:59:24 -0600 From: "Todd C. Miller" <Todd.Miller@courtesan.com> To: Warner Losh <imp@village.org> Cc: "Todd C. Miller" <Todd.Miller@courtesan.com>, "Andrey A. Chernov" <ache@nagual.pp.ru>, Kris Kennaway <kris@FreeBSD.ORG>, "Vladimir Mencl, MK, susSED" <mencl@nenya.ms.mff.cuni.cz>, freebsd-security@FreeBSD.ORG, security-officer@FreeBSD.ORG Subject: Re: UNIX locale format string vulnerability (fwd) Message-ID: <200009072159.e87LxO816950@xerxes.courtesan.com> In-Reply-To: Your message of "Thu, 07 Sep 2000 15:52:35 MDT." <200009072152.PAA06531@harmony.village.org> References: <200009072150.e87LoDm26973@xerxes.courtesan.com> <200009072126.e87LQuE12710@xerxes.courtesan.com> <Pine.BSF.4.21.0009071356030.8316-100000@freefall.freebsd.org> <200009072126.e87LQuE12710@xerxes.courtesan.com> <200009072132.PAA06187@harmony.village.org> <20000908013556.A19114@nagual.pp.ru> <200009072140.e87Le3715994@xerxes.courtesan.com> <20000908014646.A19231@nagual.pp.ru> <200009072152.PAA06531@harmony.village.org>
next in thread | previous in thread | raw e-mail | index | archive | help
In message <200009072152.PAA06531@harmony.village.org> so spake Warner Losh (imp): > If it has a '/' in it, don't you mean? > "../../../../../../../../../../../home/imp/bad-thing" is effectively > an absolute path. No, neither the BSD libtermcap nor ncurses follow relative paths. This makes sense since there's no reason why '/' wouldn't be valid in a termcap entry which TERMCAP can contain. The TERMPATH and TERMINFO variables are different in that they only contains pathnames and so can be stripped out with extreme prejudice ;-) - todd To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200009072159.e87LxO816950>