From owner-freebsd-security  Wed Feb  5 12:17:31 1997
Return-Path: <owner-security>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id MAA08568
          for security-outgoing; Wed, 5 Feb 1997 12:17:31 -0800 (PST)
Received: from gvr.win.tue.nl (root@gvr.win.tue.nl [131.155.210.19])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id MAA08485;
          Wed, 5 Feb 1997 12:16:10 -0800 (PST)
Received: (from guido@localhost) by gvr.win.tue.nl (8.8.5/8.8.2) id VAA17521; Wed, 5 Feb 1997 21:14:04 +0100 (MET)
From: Guido van Rooij <guido@gvr.win.tue.nl>
Message-Id: <199702052014.VAA17521@gvr.win.tue.nl>
Subject: Re: 2.1.6+++: crt0.c CRITICAL CHANGE
In-Reply-To: <Pine.NEB.3.95.970205194827.25582A-100000@mailserv.tversu.ac.ru> from Vadim Kolontsov at "Feb 5, 97 07:55:52 pm"
To: vadim@tversu.ac.ru (Vadim Kolontsov)
Date: Wed, 5 Feb 1997 21:14:04 +0100 (MET)
Cc: Guido.vanRooij@nl.cis.philips.com, jgreco@solaria.sol.net,
        joerg_wunsch@uriah.heep.sax.de, core@freebsd.org, security@freebsd.org,
        jkh@freebsd.org
X-Mailer: ELM [version 2.4ME+ PL28 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-security@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

> 
>   Yes, but why not to use lfix only for static binaries? I can add
> checking if binary statically or dynamic linked. Also we can include a 
> patched and recompiled version of libc into archive.
>   Of course, problem with _static_ binaries which uses setlocale() 
> _by itself_ is still exists... this binaries need recompilation.. any
> ideas? Are there any such programs in FreeBSD distribution?

Both statically and dynamically binaries suffer from the problem...

-Guido