[Chicken-users] [SECURITY] Buffer overrun vulnerability in Chicken's scheduler

2012-06-11 Thread Peter Bex
Hello Chicken users, Recently a buffer overrun error was discovered in Chicken's thread scheduler. This buffer overrun is triggered on UNIX-like OSes when a file descriptor with an integer value higher than FD_SETSIZE gets opened due to the way the POSIX select() function is currently being

Re: [Chicken-users] [SECURITY] Buffer overrun vulnerability in Chicken's scheduler

2012-06-11 Thread Peter Bex
On Mon, Jun 11, 2012 at 12:33:28PM +0200, Peter Bex wrote: Currently a patch is being developed. In the meanwhile an effective workaround is to limit the maximum number of open descriptors using the Unix ulimit -n command. For those feeling adventurous, please test the attached patch. We are