[illumos-Developer] Webrev for bug 323: Need fix for glob() resource exhaustion

[Garrett D'Amore]

  Ick.  Of these, only ftpd and sshd really that interesting...

     - Garrett

On 06/ 7/11 05:41 AM, Gary Mills wrote:
> On Sun, Jun 05, 2011 at 08:00:08PM -0400, Dan McDonald wrote:
>> Isn't this bug also a problem in sftp/scp (which has its own glob)?  Perhaps
>> less of a problem given there will rarely (ever?) be anonymous ssh service
>> save for very specific apps (like hg).
> Yes, look at them all:
>
> $ find usr -name glob.c -ls
> 1610419    8 -rw-r--r--   1 mills    staff        6815 May 12 13:59 usr/src/lib/libc/port/regex/glob.c
> 1607679   18 -rw-r--r--   1 mills    staff       17149 May 12 13:59 usr/src/lib/libast/common/misc/glob.c
> 1594147    2 -rw-r--r--   1 mills    staff        1527 May 12 13:59 usr/src/cmd/lp/filter/postscript/common/glob.c
> 1588030   14 -rw-r--r--   1 mills    staff       13355 May 12 13:59 usr/src/cmd/cmd-inet/usr.sbin/in.ftpd/glob.c
> 1587164   15 -rw-r--r--   1 mills    staff       13942 May 12 13:59 usr/src/cmd/cmd-inet/usr.bin/ftp/glob.c
> 1600955   22 -rw-r--r--   1 mills    staff       21402 May 12 13:59 usr/src/cmd/ssh/libopenbsd-compat/common/glob.c
> 1594015   11 -rw-r--r--   1 mills    staff       10316 May 12 13:59 usr/src/cmd/logadm/glob.c
> 1590531    2 -rw-r--r--   1 mills    staff        1388 May 12 13:59 usr/src/cmd/eqn/glob.c
>