Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 2 Dec 1999 11:15:11 +0100 (CET)
From:      Andrzej Bialecki <abial@webgiro.com>
To:        peter.jeremy@alcatel.com.au
Cc:        Thomas Stromberg <tstromberg@rtci.com>, freebsd-audit@FreeBSD.ORG
Subject:   Re: Where to start? Heres a few overflows. (smashwidgets)
Message-ID:  <Pine.BSF.4.20.9912021113150.15679-100000@mx.webgiro.com>
In-Reply-To: <99Dec2.074732est.40322@border.alcanet.com.au>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 2 Dec 1999, Peter Jeremy wrote:

> > Whats
> >a nice automated way to find out what enviroment variables are used by a
> >binary? truss was no help here it seems.
> 
> truss (and ktrace) won't work because the environment is in user space
> and doesn't generate any system calls.

However, execve() syscall contains full environment passed to a
process. You can spy on this syscall e.g. with my SPY module :-)

http://www.freebsd.org/~abial/spy/README


Andrzej Bialecki

//  <abial@webgiro.com> WebGiro AB, Sweden (http://www.webgiro.com)
// -------------------------------------------------------------------
// ------ FreeBSD: The Power to Serve. http://www.freebsd.org --------
// --- Small & Embedded FreeBSD: http://www.freebsd.org/~picobsd/ ----




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-audit" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.20.9912021113150.15679-100000>