Re: TTY pushback vulnerabilities / TIOCSTI

[Hanno Böck <hanno () hboeck de>]

On Tue, 14 Mar 2023 11:46:33 +0100
Peter Bex <peter () more-magic net> wrote:

> Indeed, opendoas (the portable version of OpenBSD's "doas") has this
> exact bug as well: https://github.com/Duncaen/OpenDoas/issues/106

Though some context is relevant here: doas is a tool from OpenBSD.
According to the Linux kernel commit message [1] OpenBSD has fixed this
already 3 years ago by entirely removing TIOCSTI [2][3].

[1]
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=83efeeeb3d04
[2] https://undeadly.org/cgi?action=article;sid=20170701132619
[3] https://marc.info/?l=openbsd-cvs&m=149870941319610

-- 
Hanno Böck
https://hboeck.de/