[illumos-Developer] Webrev for bug 323: Need fix for glob() resource exhaustion

Gary Mills mills at cc.umanitoba.ca
Tue Jun 7 08:41:07 PDT 2011


On Tue, Jun 07, 2011 at 05:45:31AM -0700, Garrett D'Amore wrote:
>  Ick.  Of these, only ftpd and sshd really that interesting...

I've been reading the usr/src/cmd/ssh source.  Globbing is only used
in the `sftp' client, making this not a security issue.  I'm still
developing a fix but only to keep the source up to date.

I'll have another webrev today for the ftpd fix.

-- 
-Gary Mills-        -Unix Group-        -Computer and Network Services-



More information about the Developer mailing list