Article View: net.bugs.2bsd
Article #276CSS/Harvard 2.9BSD bug report #13
From: Keith Bostic
Date: Fri, 08 Nov 1985 20:45
Date: Fri, 08 Nov 1985 20:45
20 lines
1186 bytes
1186 bytes
Subject: Executable shell scripts can crash the system.
Index: sys/sys1.c 2.9BSD
Description:
Kernel doesn't check for more than one level of executable
shell scripts.
Repeat-By:
Execute "see" or any shell program that executes another shell
script.
Fix:
Apply the following diff.
sys1.c.right << >> sys1.c.wrong
75,76c76,77
< goto bad; /* check if script. one level only */
< if (!indir && u.u_exdata.ux_shell[0] == '#' && u.u_exdata.ux_shell[1] == '!') {
---
> goto bad; /* check if script. one level only */
> if (u.u_exdata.ux_shell[0] == '#' && u.u_exdata.ux_shell[1] == '!') {
Technical Details
Message-ID:
<736@seismo.CSS.GOV>Path:
arc1-ca.pugleaf.net!utzoo!linus!gatech!seismo!keithShow Full Headers
Complete Article Headers
Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP Posting-Version: version B 2.10.3 4.3bsd-beta 6/6/85; site seismo.CSS.GOV Path: arc1-ca.pugleaf.net!utzoo!linus!gatech!seismo!keith From: keith@seismo.CSS.GOV (Keith Bostic) Newsgroups: net.bugs.2bsd Subject: CSS/Harvard 2.9BSD bug report #13 Message-ID: <736@seismo.CSS.GOV> Date: Fri, 8-Nov-85 15:45:34 EST Article-I.D.: seismo.736 Posted: Fri Nov 8 15:45:34 1985 Date-Received: Sat, 9-Nov-85 06:24:11 EST Organization: Center for Seismic Studies, Arlington, VA Lines: 20 Keywords: sys1.c, shell scripts, indir