From owner-freebsd-security@FreeBSD.ORG  Mon Mar 15 04:25:04 2004
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 12D2516A4CE
	for <security@freebsd.org>; Mon, 15 Mar 2004 04:25:04 -0800 (PST)
Received: from mailhost.stack.nl (vaak.stack.nl [131.155.140.140])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 79CB543D41
	for <security@freebsd.org>; Mon, 15 Mar 2004 04:25:03 -0800 (PST)
	(envelope-from marcolz@stack.nl)
Received: from hammer.stack.nl (hammer.stack.nl [2001:610:1108:5010::153])
	by mailhost.stack.nl (Postfix) with ESMTP
	id 4055A09E#62A9D1F00A; Mon, 15 Mar 2004 13:25:02 +0100 (CET)
Received: by hammer.stack.nl (Postfix, from userid 333)
	id 34D7F6160; Mon, 15 Mar 2004 13:25:05 +0100 (CET)
Date: Mon, 15 Mar 2004 13:25:05 +0100
From: Marc Olzheim <marcolz@stack.nl>
To: Marc Bevand <bevand_m@epita.fr>
Message-ID: <20040315122505.GA686@stack.nl>
References: <200403120922.i2C9M0jC002510@stud326.idi.ntnu.no>
	<20040312104914.GA52099@ip.net.ua>
	<20040312105730.GA99925@stud326.idi.ntnu.no>
	<20040312110657.GB52099@ip.net.ua> <20040312111526.GA14260@stack.nl>
	<20040312125820.GA8574@lum.celabo.org> <20040312154600.GC2235@ip.net.ua>
	<20040312110725.698ebe20@localhost> <20040312161049.GA2872@ip.net.ua>
	<20040312192952.GA23211@nash.epita.fr>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20040312192952.GA23211@nash.epita.fr>
X-Operating-System: FreeBSD hammer.stack.nl 5.2-CURRENT FreeBSD 5.2-CURRENT
X-URL: http://www.stack.nl/~marcolz/
User-Agent: Mutt/1.5.6i
cc: security@freebsd.org
Subject: Re: bin/64150: [PATCH] ls(1) coredumps when started via execve(2)
	with no argv.
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 15 Mar 2004 12:25:04 -0000

On Fri, Mar 12, 2004 at 08:29:52PM +0100, Marc Bevand wrote:
> On 12 Mar 2004, Ruslan Ermilov wrote:
> | On Fri, Mar 12, 2004 at 11:07:25AM -0500, Tom Rhodes wrote:
> | > 
> | > Will it 'break' anything?
> |
> | Sure it will, the question is should we care about something that's
> | already broken.  ;)
> 
> It will break almost all shellcodes trying to be the shorter ones
> (as they pass NULL for argv and envp). So we can view it as a small
> security improvement (just kidding).

When I tested my patches (over 2 years ago), I didn't trigger any
compilation, nor any runtime problems...

Marc