Vulnerability Development: Re: TCSH problems?

[Alex <alex () bsdfreak org>]

        After some ktracing, and code auditing by myself and a colleague,
we believe the problem *may* infact be in libc's setenv() and getenv()
functions.  We were able to duplicate the bug on various platforms, mostly
causing signal 6s and dumping cores.  Feedback would be appreciated


> > setenv HOME `perl -e 'print "/" x 10000'`
                                        ^ Length varies from 1024-10000
for effectiveness on diffrent OSes.

-Alex