Re: Voulnerability in 3.*-4.*
| From: | Sascha Schumann | Date: | Sat, 08 Jan 2000 14:50:07 +0000 |
| Subject: | Re: Voulnerability in 3.*-4.* | ||
| References: | 1 2 | Groups: | php.dev |
| Request: | Send a blank email to php-dev+get-14421@lists.php.net to get a copy of this message | ||
On Sat, Jan 08, 2000 at 05:23:06PM +0300, vvs_php@nsrd.npi.msu.su wrote:
>
>
> On Sat, 8 Jan 2000, Sascha Schumann wrote:
>
> > > char fn[]="/foo/foo/foo/blah";
> > Constant strings are by default not writable. Compile with
> > -fwritable-strings, if that is the desired behaviour.
> It makes no difference in our case, as I can see, compiling and running...
It did not change the result in this case, but it changed the
way you got there. Your example did not demonstrate the real
bug, it simply demonstrated that writing into the text
segment of a process does not work.
But thanks anyway for discovering this bug and reporting it.
--
Regards,
Sascha Schumann
Consultant