Re: ksh sanatizing argv redundant

2015-09-01 Thread Martijn van Duren
On 09/01/15 03:49, Theo de Raadt wrote: Martijn van Duren wrote: Hello tech@, I took a quick glance at ksh and one of the first things I noticed was that it uses some sanatizing code on argv. When looking at execve(2) I see that EINVAL or EFAULT are returned when argv isn't properly

ksh sanatizing argv redundant

2015-08-31 Thread Martijn van Duren
Hello tech@, I took a quick glance at ksh and one of the first things I noticed was that it uses some sanatizing code on argv. When looking at execve(2) I see that EINVAL or EFAULT are returned when argv isn't properly formatted. I've also verified this quickly by a small PoC and in

Re: ksh sanatizing argv redundant

2015-08-31 Thread Ted Unangst
Martijn van Duren wrote: > Hello tech@, > > I took a quick glance at ksh and one of the first things I noticed was > that it uses some sanatizing code on argv. When looking at execve(2) I > see that EINVAL or EFAULT are returned when argv isn't properly > formatted. I've also verified this

Re: ksh sanatizing argv redundant

2015-08-31 Thread Theo de Raadt
> Martijn van Duren wrote: > > Hello tech@, > > > > I took a quick glance at ksh and one of the first things I noticed was > > that it uses some sanatizing code on argv. When looking at execve(2) I > > see that EINVAL or EFAULT are returned when argv isn't properly > > formatted. I've also