Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 20 Jan 2000 20:38:40 +0000
From:      David Malone <dwmalone@maths.tcd.ie>
To:        Mike Tancsa <mike@sentex.net>
Cc:        freebsd-security@freebsd.org, freebsd-stable@freebsd.org, security-officer@freebsd.org
Subject:   Re: bugtraq posts:  stream.c - new FreeBSD exploit?
Message-ID:  <20000120203840.A49511@walton.maths.tcd.ie>
In-Reply-To: <3.0.5.32.20000120152818.01d7fa40@staff.sentex.ca>; from mike@sentex.net on Thu, Jan 20, 2000 at 03:28:18PM -0500
References:  <3.0.5.32.20000120152818.01d7fa40@staff.sentex.ca>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Jan 20, 2000 at 03:28:18PM -0500, Mike Tancsa wrote:
> 
> Can anyone confirm the bugtraq posting ?  Are the freebsd folks working on
> a fix ? If so, what versions are effected ?

It was mentioned on freebsd-net a few days ago. Jordan said someone was
working on a fix. The kernel message mentioned seems to only occur in
an old sound driver:

	% find . -type f -print | xargs fgrep -i "list empty"
	./i386/isa/sound/gustest/Attic/midithru.c,v:    if (!nlen) {fprintf(stderr, "Free list empty but no notes playing\n");return;}  /* No notes playing */

Which seems unlikely to be involved with the attack.

	David.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000120203840.A49511>