NetBSD-Bugs archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: bin/38327: uu{en,de}code - any reason to use non-portable [sg]etprogname?
> Since in general it's only used for printing error messages, it
> doesn't allow an attacker to do anything they can't do more easily
> with /bin/echo.
> If it's used for much of anything else, with the possible exception of
> a few programs that treat magic values of argv[0] as command-line
> options, it's probably a bug anyhow.
I agree.
Until new USE_FEATURE implementation appeares, wip/netbsd-uuencode
is patched. Not a big problem.
--
Best regards, Aleksey Cheusov.
Home |
Main Index |
Thread Index |
Old Index