oss-sec mailing list archives

Re: libdbus hardening


From: yersinia <yersinia.spiros () gmail com>
Date: Tue, 10 Jul 2012 15:57:53 +0200

As you already know popt include it from many years.

Best regards

Elia

2012/7/10, Solar Designer <solar () openwall com>:
On Tue, Jul 10, 2012 at 03:13:55PM +0200, Florian Weimer wrote:
Perhaps we can put a getenv_secure() into libc, which will perform all
the appropriate checks (including future checks we do not know about
yet)?  Duplicating the code in many libraries does not seem prudent.

We already have __secure_getenv() in glibc, which I think is what
libraries like this should be using on systems with glibc.

Apparently, it was even in LSB until 1.3 inclusive, but was since
dropped from there?

Alexander


-- 
Inviato dal mio dispositivo mobile


Current thread: