Bugtraq mailing list archives
Re: pingflood.c
From: deraadt () CVS OPENBSD ORG (Theo de Raadt)
Date: Mon, 18 May 1998 12:46:16 -0600
BTW, how many setuid programs are there that will catch various signals and will behave "not-as-expected" when forked off by a signal-bomber parent process, such as pingflood?
Unlike seemingly everone else in this thread, who are very busy trying to patch ping for a problem which it is obvious many other programs in the source tree will also encounter, Aggelos has taken the first step and used started thinking about the further consequences. Yes, this is a much bigger problem. Yes, other parts of the system are also affected by this and similar problems. For all kinds of signals. For more information on how I have fixed this problem, due to a conversation with David Holland a couple months back about this basic problem, see both www.openbsd.org/security.html#23 and www.openbsd.org/errata.html#kill
Current thread:
- Re: pingflood.c Aggelos P. Varvitsiotis (May 18)
- Re: pingflood.c pedward () WEBCOM COM (May 18)
- Re: pingflood.c Jeffrey Hutzelman (May 18)
- Re: pingflood.c Phil Stracchino (May 18)
- root from file table overflows? Chris Conner (May 19)
- Re: pingflood.c Theo de Raadt (May 18)
- Re: pingflood.c sinster () DARKWATER COM (May 18)
- <Possible follow-ups>
- Re: pingflood.c pedward () WEBCOM COM (May 18)
- Re: pingflood.c Niall Smart (May 18)
- Re: pingflood.c pedward () WEBCOM COM (May 18)