From owner-freebsd-hackers@FreeBSD.ORG  Tue Jun 24 04:23:11 2014
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id DECB22B9
 for <freebsd-hackers@freebsd.org>; Tue, 24 Jun 2014 04:23:11 +0000 (UTC)
Received: from mout.gmx.com (mout.gmx.com [74.208.4.201])
 (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 91F3D29DF
 for <freebsd-hackers@freebsd.org>; Tue, 24 Jun 2014 04:23:11 +0000 (UTC)
Received: from [157.181.96.215] ([157.181.96.215]) by mail.gmx.com
 (mrgmxus001) with ESMTPSA (Nemesis) id 0M8lr8-1WpM0x1ysm-00CABi for
 <freebsd-hackers@freebsd.org>; Tue, 24 Jun 2014 06:17:59 +0200
Message-ID: <53A8FBD7.8000900@gmx.com>
Date: Tue, 24 Jun 2014 06:17:27 +0200
From: dt71@gmx.com
User-Agent: Mozilla/5.0 (X11; FreeBSD i386;
 rv:29.0) Gecko/20100101 Firefox/29.0 SeaMonkey/2.26
MIME-Version: 1.0
To: freebsd-hackers@freebsd.org
Subject: Re: OB1
References: <20140622135308.GF1824@pwnie.vrt.sourcefire.com>
In-Reply-To: <20140622135308.GF1824@pwnie.vrt.sourcefire.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Provags-ID: V03:K0:rG2MUGf9g9APMlUVdzGeuxJ0kGaH45G60kJW1cs9jPP5ctsUda3
 DX5/K4WNq+CrT08FMUmlPhjy+65bkWQiku9kv6w/7Spgg/JBt3DunC2SXwGtzA26NM5hLGE
 uEWJ9UMDirK2s9lTJSDzJTgYwmcRq3rhb2cVIh+CQP4gJfrDswAoXClKIsOWGW/DXn9cSVr
 NmSeroso5kn0PKLvrdTGA==
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
 <freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-hackers>, 
 <mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers/>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
 <mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Jun 2014 04:23:11 -0000

Speaking of backdoors...

lib/libugidfw/ugidfw.c:
>if (len < 0 || len > left)

):<