From owner-freebsd-audit Fri Dec 3 21:34:43 1999 Delivered-To: freebsd-audit@freebsd.org Received: from gndrsh.dnsmgr.net (GndRsh.dnsmgr.net [198.145.92.4]) by hub.freebsd.org (Postfix) with ESMTP id 8B63B15334; Fri, 3 Dec 1999 21:34:29 -0800 (PST) (envelope-from freebsd@gndrsh.dnsmgr.net) Received: (from freebsd@localhost) by gndrsh.dnsmgr.net (8.9.3/8.9.3) id VAA82253; Fri, 3 Dec 1999 21:32:33 -0800 (PST) (envelope-from freebsd) From: "Rodney W. Grimes" Message-Id: <199912040532.VAA82253@gndrsh.dnsmgr.net> Subject: Re: More binaries with overflows. (7) In-Reply-To: from Kris Kennaway at "Dec 3, 1999 07:26:55 pm" To: kris@hub.freebsd.org (Kris Kennaway) Date: Fri, 3 Dec 1999 21:32:33 -0800 (PST) Cc: tstromberg@rtci.com, freebsd-audit@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL54 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-audit@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > On Fri, 3 Dec 1999 tstromberg@rtci.com wrote: > > > /usr/bin/fsplit arg overflow in -e, ex: fsplit -e [A*16384] > > This one is just gross. It needs to be rewritten. > > > /usr/bin/patch arg overflow, ex: patch -r [A*16384] > > OpenBSD have a bunch of tempfile fixes as well as the buffer overflow > fixes which should be merged. > > > /usr/bin/pr arg overflow, ex: pr -s [A*16384] > > This one was just a simple bug :) > > > /usr/bin/ypcat arg overflow in -d, ex: ypcat -d [A*16384] blah > > This one was a buffer overflow in libc which I'm testing a patch for now. > > I haven't checked the others yet Good work Kris, but I have a point about your commits, I didn't see any ``reviewed by's: for them and you've now hidden the old flaw from one of the only automated tools we have for finding these types of flaws :-( -audit related fixes should really be very carefuly eyeballed by a few reviewers, too often in the past hasty patch work by even the best of security programmers has related to harder to find security bugs. -- Rod Grimes - KD7CAX @ CN85sl - (RWG25) rgrimes@gndrsh.dnsmgr.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-audit" in the body of the message