On Thursday 07 August 2008 06:32:01 Zhang Xiliang wrote:
> I think the way "f == v" can't make sure that they didn't type -F =10.
> After "v = strstr(pair, "=")" and v++. The v will not equal to f.
>
> It is checked by "audit_name_to_field()", but not "f == v".
> Because before v++, the "*v" is set to 0. we can use "*f == 0" to check out
> the case. The patch is for it.

Applied. Thanks for the patch !

-Steve

--
Linux-audit mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/linux-audit

Reply via email to