From owner-freebsd-security  Thu Sep  7 16: 5:14 2000
Delivered-To: freebsd-security@freebsd.org
Received: from nagual.pp.ru (pobrecita.freebsd.ru [194.87.13.42])
	by hub.freebsd.org (Postfix) with ESMTP
	id A385D37B422; Thu,  7 Sep 2000 16:05:08 -0700 (PDT)
Received: (from ache@localhost)
	by nagual.pp.ru (8.11.0/8.11.0) id e87N4vS20186;
	Fri, 8 Sep 2000 03:04:57 +0400 (MSD)
	(envelope-from ache)
Date: Fri, 8 Sep 2000 03:03:15 +0400
From: "Andrey A. Chernov" <ache@nagual.pp.ru>
To: Warner Losh <imp@village.org>
Cc: Kris Kennaway <kris@FreeBSD.ORG>,
	"Todd C. Miller" <Todd.Miller@courtesan.com>,
	"Vladimir Mencl, MK,     susSED" <mencl@nenya.ms.mff.cuni.cz>,
	freebsd-security@FreeBSD.ORG, security-officer@FreeBSD.ORG,
	millert@openbsd.org
Subject: Re: UNIX locale format string vulnerability (fwd)
Message-ID: <20000908030313.A20166@nagual.pp.ru>
References: <200009072234.QAA07199@harmony.village.org> <Pine.BSF.4.21.0009071532190.25298-100000@freefall.freebsd.org> <200009072234.QAA07199@harmony.village.org> <200009072246.QAA07311@harmony.village.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <200009072246.QAA07311@harmony.village.org>; from imp@village.org on Thu, Sep 07, 2000 at 04:46:55PM -0600
Organization: Biomechanoid
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Thu, Sep 07, 2000 at 04:46:55PM -0600, Warner Losh wrote:
>  		if (!env || !*env)
>  			env = getenv("LANG");
>  
> -		if (!env || !*env)
> +		if (!env || !*env || strchr(env, '/'))
>  			env = "C";

Ok'ed from me.

-- 
Andrey A. Chernov
<ache@nagual.pp.ru>
http://ache.pp.ru/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message