kern/180077: [rtld] [security] Potential DoS in RTLD

Shawn Webb lattera at gmail.com
Wed Jul 3 00:40:02 UTC 2013


The following reply was made to PR kern/180077; it has been noted by GNATS.

From: Shawn Webb <lattera at gmail.com>
To: bug-followup at FreeBSD.org, lattera at gmail.com
Cc:  
Subject: Re: kern/180077: [rtld] [security] Potential DoS in RTLD
Date: Tue, 2 Jul 2013 20:31:21 -0400

 I understand that. I also understand that we're loading shared objects
 that can do what they want, since the purpose of a shared object is to
 execute code. If the author of a shared object wanted to DoS the
 service/system or execute arbitrary code, he could simply add code to
 do so. I just stumbled across this the other day and thought that it
 technically is a bug. A one-word fix would be easy to implement and
 could prevent weird headaches. I wouldn't regard the bug as important
 at all, given what I just previously said. The point is that it's
 still technically a bug.


More information about the freebsd-bugs mailing list