Re: Upcoming FreeBSD Security Advisory

Jan Muenther napsal/wrote, On 12/01/09 12:53:
> I'd be greatly surprised if the affected code looked different in 6.x.

True, affected code is same. But unsetenv() "return" 'void' on 6.x, so 
the code can't be patched the same way as in 7.x/8.x/HEAD

We need something like

if (getenv(...) != NULL ) {
	unsetenv(...);
	if (getenv(...) != NULL )
		ABORT - BROKEN ENVIRONMENT
}

					Dan

_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"