Re: Serious Linux 2.0.34 security problem

> > fcntl(0,F_SETOWN,p);
> > s = fcntl(0,F_GETFL,0);
> > fcntl(0,F_SETFL,s|O_ASYNC);
> > printf("Sending SIGIO - press enter.\n");
> > getchar();
> > fcntl(0,F_SETFL,s&~O_ASYNC);
> > printf("SIGIO send attempted.\n");
> > return 0;
> > }
>
> Well, that looks like one of the class of security problems described
> by www.openbsd.org/advisories/signals. Hasn't anyone else fixed those
> problems yet?

Of course Theo if you actually bothered to look back at the Linux sources
you'd see thats an error that crept in and we had SIGIO right way before
the old advisories that predate OpenBSD.

Alan
Received on Jul 02 1998