[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20110701223621.34a99e20@redhat.com>
Date: Fri, 1 Jul 2011 22:36:21 +0200
From: Tomas Hoger <thoger@...hat.com>
To: oss-security@...ts.openwall.com
Cc: cxib@...urityreason.com
Subject: Re: Re: php ZipArchive::addGlob() crashes on invalid
flags
On Fri, 01 Jul 2011 18:34:51 +0200 Maksymilian Arciemowicz wrote:
> Using glob(3) with invalid flag may give unexpected results. Try
> glob(3) of netbsd implementations and use flags 0x39 0x40..
I don't have an easy way to test on netbsd, but looking at glob.h in
netbsd cvs, 0x40 is GLOB_ALTDIRFUNC, and 0x39 contains GLOB_APPEND,
which were problematic on glibc as well. Both due to uninitialized
glob_t members.
--
Tomas Hoger / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
