Jan Muenther napsal/wrote, On 12/01/09 12:53:
I'd be greatly surprised if the affected code looked different in 6.x.
True, affected code is same. But unsetenv() "return" 'void' on 6.x, so
the code can't be patched the same way as in 7.x/8.x/HEAD
We need something like
if (getenv(...) != NULL ) {
unsetenv(...);
if (getenv(...) != NULL )
ABORT - BROKEN ENVIRONMENT
}
Dan
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[email protected]"
