lkml.org 
[lkml]   [1998]   [Nov]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: [PATCH] bugs around truncate.
On Wed, Nov 11, 1998 at 09:36:37AM -0500, Alexander Viro wrote:

> [Cc'd to maintainers]
>
> a) open_namei() with O_CREAT, O_TRUNC but without O_NOFOLLOW is called
> in fs/binfmt_aout::119, arch/mips/kernel/irixelf.c::1200,
> arch/sparc64/kernel/binfmt_aout32::109. Security hole (see binfmt_elf)

I've already applied the same fix as you posted, just didn't yet make it
back to Linus' sources.

Thanks anyway,

Ralf

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

\
 
 \ /
  Last update: 2005-03-22 13:45    [W:0.038 / U:0.052 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site