Vulnerability Development mailing list archives

Re: trusting user-supplied data (was Re: FreeBSD Security AdvisoryFreeBSD-SA-02:23.stdio)

From: Paul Starzetz <Paul.Starzetz () imag fr>
Date: Sat, 04 May 2002 21:02:28 +0200

Syzop wrote:

searched for such a tool so there might be better ones)...
But that one was slow when "resolving" fd#-> filename, you use
a nice /proc trick while env_audit was searching the whole filesystem
for a certain inode... I modified that part now and you can find it at

It will probably only work on Linux :-> (maybe solaris?)

regards,

Paul

Current thread:

Re: trusting user-supplied data (was Re: FreeBSD Security AdvisoryFreeBSD-SA-02:23.stdio) Syzop (May 04)
- Re: trusting user-supplied data (was Re: FreeBSD Security AdvisoryFreeBSD-SA-02:23.stdio) Paul Starzetz (May 04)
  - Finding and exploiting buffer overflows in Windows. John Thornton (May 05)
    - RE: Finding and exploiting buffer overflows in Windows. Vlad (May 05)
    - Re: Finding and exploiting buffer overflows in Windows. Jose Nazario (May 05)