Re: Veractiy and FreeBSD

From: Garrett Wollman (wollman_at_khavrinen.lcs.mit.edu)
Date: 11/05/03

  • Next message: Andrew McNaughton: "Re: Apache leaks sensitive info in PHP phpinfo() calls" 
    Date: Wed, 5 Nov 2003 12:41:53 -0500 (EST)
To: Kim Needham <kim.needham@rocksoft.com>

    <<On Wed, 05 Nov 2003 11:58:21 +1030, Kim Needham <kim.needham@rocksoft.com> said:

    > This is caused by a check that determines if the /proc filesystem is on
    > the same device as the file being read to prevent reading in files of
    > infinite length.

    The correct way to perform this check is to call fstatfs() on the file
    descriptor and examine f_fstypename[] to see what it is. You probably
    shouldn't look explicitly at the type name; use getvfsbyname() on the
    type name; if (vfc_flags & VFCF_SYNTHETIC) then the contents of the
    file system are generated by the kernel.

    -GAWollman

    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"

  • Next message: Andrew McNaughton: "Re: Apache leaks sensitive info in PHP phpinfo() calls"