Vulnerability Development mailing list archives

OSS www.opensound.com


From: fejed <fejed () optushome com au>
Date: Fri, 24 Jan 2020 00:52:36 +1100

hi,

Earlier on today, I was messing with strace and OSS, see www.opensound.com,
[eks@localhost oss]$ cat version.txt
This version (3.9.4b-010118) is compiled for Linux-2.2.18-UP
I noticed this:


[400f8c34] read(255, "\n$MODTOOLS/insmod -V > /tmp/oss."..., 8176) = 8176

/tmp/oss eh?
so if the module was not loaded at the current point in time, theoretically,
could a module not be placed in /tmp as 'oss' and then it would be insmod'd and
used?


Current thread: