svn commit: r184300 - in stable/7/lib: libc/stdlib libutil

Ed Schouten ed at 80386.nl
Mon Oct 27 12:40:10 PDT 2008


* John Baldwin <jhb at freebsd.org> wrote:
> I would perhaps add a note that the duplicate revoke() in openpty() is only to 
> support legacy libc's with broken unlockpt() routines.  We could maybe remove 
> the revoke()/ptsname() from openpty() on 8.x though as all 8.x machines 
> should have a working unlockpt().

Good point, but I'd rather leave revoke() there for at least a couple of
months. If people just download the openpty() source from -CURRENT
through cvsweb and use it as an example for their own application, they
could create a potential security issue when they run the application on
RELENG_*.

Shall we leave the revoke() call there for now, but remove it before we
ship 8.0-RELEASE?

-- 
 Ed Schouten <ed at 80386.nl>
 WWW: http://80386.nl/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/svn-src-all/attachments/20081027/21db89de/attachment.pgp


More information about the svn-src-all mailing list