From owner-freebsd-hackers Sat Feb 8 04:22:44 1997 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.5/8.8.5) id EAA09002 for hackers-outgoing; Sat, 8 Feb 1997 04:22:44 -0800 (PST) Received: from sax.sax.de (sax.sax.de [193.175.26.33]) by freefall.freebsd.org (8.8.5/8.8.5) with SMTP id EAA08997 for ; Sat, 8 Feb 1997 04:22:40 -0800 (PST) Received: (from uucp@localhost) by sax.sax.de (8.6.12/8.6.12-s1) with UUCP id NAA25273; Sat, 8 Feb 1997 13:22:34 +0100 Received: (from j@localhost) by uriah.heep.sax.de (8.8.5/8.6.9) id NAA25944; Sat, 8 Feb 1997 13:16:18 +0100 (MET) Message-ID: Date: Sat, 8 Feb 1997 13:16:18 +0100 From: j@uriah.heep.sax.de (J Wunsch) To: john@dexter.starfire.mn.org (John Lind) Cc: hackers@freebsd.org Subject: Re: DES for 2.1.6? References: X-Mailer: Mutt 0.55-PL10 Mime-Version: 1.0 X-Phone: +49-351-2012 669 X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F 93 21 E0 7D F9 12 D6 4E Reply-To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch) In-Reply-To: ; from John Lind on Feb 8, 1997 00:04:17 -0600 Sender: owner-hackers@freebsd.org X-Loop: FreeBSD.org Precedence: bulk As John Lind wrote: > good reason, and I understand that). Can I use the DES source from > 2.1.5 that I have tucked away on another machine? Unfortunately, > I do not have the sources, just the binaries. j@uriah 715% cvs diff -u -kk -rRELENG_2_1_{5,6_1}_RELEASE /usr/src/secure/lib/libcrypt cvs diff: Diffing /usr/src/secure/lib/libcrypt cvs diff: Diffing /usr/src/secure/lib/libcrypt/test j@uriah 716% So it looks both versions are identical as far as libcrypt is concerned. > I am sure that this whole situation must be very frustrating for > all of you. I know how you have labored to make FreeBSD a trusted > platform for commercial and other serious development, and to find > something like this, left over from CSRG probably, and no fault of > your own, must be maddening. The missing bounds check was CSRG inheritance. The not yet killed ENABLE_STARTUP_LOCALE was homegrown. It was particularly annoying for two reasons: it affects all binaries, and it served no real purpose at all. (It was considered a bad hack later.) -- cheers, J"org joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-)