|
Message-ID: <3E86D26D.4050003@tagnet.ru> Date: Sun, 30 Mar 2003 17:18:05 +0600 From: Boris Kovalenko <boris@...net.ru> To: popa3d-users@...ts.openwall.com Subject: Re: virtual.c another question Solar Designer wrote: >On Sun, Mar 30, 2003 at 01:29:38PM +0600, Boris Kovalenko wrote: > >Hi, > > >>Why to run other code if we already know that user is invalid? Why lstat >>directory and try to open file for this "INVALID" user? >> >> > >This is to reduce information leaks via timing. > What type of information? May be I need do the same within my module? Please be more concretic. > > > Boris
Powered by blists - more mailing lists
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.