Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <3E86D26D.4050003@tagnet.ru>
Date: Sun, 30 Mar 2003 17:18:05 +0600
From: Boris Kovalenko <boris@...net.ru>
To:  popa3d-users@...ts.openwall.com
Subject: Re: virtual.c another question

Solar Designer wrote:

>On Sun, Mar 30, 2003 at 01:29:38PM +0600, Boris Kovalenko wrote:
>
>Hi,
>  
>
>>Why to run other code if we already know that user is invalid? Why lstat 
>>directory and try to open file for this "INVALID" user?
>>    
>>
>
>This is to reduce information leaks via timing.
>
What type of information? May be I need do the same within my module? 
Please be more concretic.

>
>  
>

Boris


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.