Re: [ ** Snes9x buffer overflow vulnerability ** ]

[Alistair Crooks <agc () pkgsrc org>]

On Tue, Oct 16, 2001 at 11:03:05AM -0500, Scott Dier wrote:
> * Niels Heinen <zilli0n () gmx net> [011016 10:55]:
> > Affected version: v1.37 prior versions might also be affected. 
> > Tested platforms: FreeBSD, NetBSD, OpenBSD and Linux.  

The NetBSD Packages Collection does not install the binaries setuid
root either, and, according to the cvs logs, never has done.

1.1          (wiz      09-Nov-00): do-install:
1.1          (wiz      09-Nov-00):      ${INSTALL_PROGRAM} ${WRKSRC}/snes9x ${PREFIX}/bin
1.1          (wiz      09-Nov-00):      ${INSTALL_PROGRAM} ${WRKSRC}/offsets ${PREFIX}/bin

% ls -al /usr/pkg/bin/{snes9x,offsets}
-r-xr-xr-x  1 root  wheel    47284 Oct 16 19:47 /usr/pkg/bin/offsets
-r-xr-xr-x  1 root  wheel  1745244 Oct 16 19:47 /usr/pkg/bin/snes9x
%

Regards,
Alistair